Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownEclipse Jetty ConcatServlet VulnerabilityPatch nowKEVEPSS 78.48%Aug 19, 2022
- Unknowngetperfectsurvey perfect_survey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 86.78%Aug 19, 2022
- UnknownLantronix premierwave_2050_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 36.94%Aug 19, 2022
- UnknownNETGEAR rax43 Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.16%Aug 19, 2022
- UnknownNETGEAR rax43 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 2.20%Aug 19, 2022
- High7.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.29%Aug 17, 2022
- High8.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 9.93%Aug 17, 2022
- UnknownMozilla Firefox Out-of-bounds WritePatch nowKEVEPSS 2.56%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 26.71%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.10%Aug 15, 2022
- UnknownMozilla Firefox Use After FreePatch nowKEVEPSS 0.92%Aug 15, 2022
- Unknownomron nx701-1600_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.26%Aug 13, 2022
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.89%Aug 10, 2022
- UnknownVMware vRealize Operations Authentication BypassPatch nowKEVEPSS 0.83%Aug 10, 2022
- High8.6Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityPatch nowKEVEPSS 2.54%Aug 10, 2022
- High7.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityPatch nowKEVEPSS 67.76%Aug 9, 2022
- Unknownideastocode Enable SVG, WebP, and ICO Upload Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Aug 1, 2022
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.36%Jul 28, 2022
- Unknownslickremix feed_them_social Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.01%Jul 26, 2022
- Unknowntransposh transposh_wordpress_translation Missing AuthorizationPatch nowKEVEPSS 4.79%Jul 25, 2022
- Unknownprestashop prestashop Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.72%Jul 22, 2022
- Critical9.8Atlassian Questions For Confluence App Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 98.24%Jul 20, 2022
- UnknownGoogle Chrome Improper Input ValidationPatch nowKEVEPSS 1.14%Jul 20, 2022
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.92%Jul 19, 2022
- Medium6.5Google Chromium Intents Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 4.56%Jul 19, 2022