Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 85.40%May 31, 2022
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 38.30%May 31, 2022
- UnknownVMware Spring Framework Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 13.23%May 31, 2022
- UnknownvSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVEPSS 4.67%May 31, 2022
- Unknownsixapart movable_type Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 88.14%May 31, 2022
- High7.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.16%May 30, 2022
- UnknownZyxel nwa1100-nh_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.05%May 26, 2022
- Unknownkramerav viaware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 54.39%May 26, 2022
- Unknownkramerav viaware Improper Privilege ManagementPatch nowKEVEPSS 70.75%May 26, 2022
- Unknownthedaylightstudio Fuel CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 82.94%May 26, 2022
- High8.8WebKitGTK Memory Corruption VulnerabilityPatch nowKEVEPSS 1.56%May 23, 2022
- Medium6.5Cisco IOS XR Open Port VulnerabilityPatch nowKEVEPSS 11.47%May 20, 2022
- Unknownweblizar school_management Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 64.08%May 20, 2022
- Critical9.1QNAP Photo Station Externally Controlled Reference VulnerabilityPatch nowKEVEPSS 87.91%May 18, 2022
- Critical9.8dotCMS Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 91.25%May 18, 2022
- UnknownApple iphone_os Out-of-bounds ReadPatch nowKEVEPSS 11.03%May 18, 2022
- UnknownRejected reason: DO NOT USE THIS CANDIDATE NUMBER.Patch nowKEVMay 18, 2022
- Critical9.8SolarView Compact Command Injection VulnerabilityPatch nowKEVEPSS 98.04%May 12, 2022
- Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityPatch nowKEVEPSS 99.94%May 12, 2022
- Critical9.8mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.46%May 11, 2022
- UnknownApache Struts Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')Patch nowKEVEPSS 85.43%May 11, 2022
- UnknownApache Struts CookieInterceptor VulnerabilityPatch nowKEVEPSS 78.32%May 11, 2022
- UnknownApache Struts ParametersInterceptor ClassLoader Maniupulation VulnerabilityPatch nowKEVEPSS 98.06%May 11, 2022
- UnknownApache Struts ParametersInterceptor VulnerabilityPatch nowKEVEPSS 99.39%May 11, 2022
- UnknownPortable phpMyAdmin Plugin before 1.3.1 for WordPress Authentication BypassPatch nowKEVEPSS 23.75%May 11, 2022