Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.89%Oct 27, 2023
- UnknownSecurity exception in org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.applyOpen the advisoryOct 3, 2023
- Critical9.8Ivanti Sentry Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.95%Aug 21, 2023
- UnknownApache Shiro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.07%Jul 26, 2023
- High7.5Ignite Realtime Openfire Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%May 26, 2023
- Critical9.8Apache RocketMQ Command Execution VulnerabilityPatch nowKEVEPSS 96.57%May 24, 2023
- UnknownApache openoffice Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 50.56%May 2, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 97.41%Apr 24, 2023
- UnknownApache kafka Observable DiscrepancyPatch nowKEVEPSS 6.20%Apr 11, 2023
- UnknownApache log4j Improper Input ValidationPatch nowKEVEPSS 97.91%Feb 14, 2023
- UnknownApache HTTP Server versions 2.4.0 to 2.4.23 mod_session_crypto VulnerabilityPatch nowKEVEPSS 49.02%Feb 14, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.75%Jan 18, 2023
- UnknownApache commons_text Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 99.93%Jan 12, 2023
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.58%Dec 21, 2022
- High8.8Apache Spark Command Injection VulnerabilityPatch nowKEVEPSS 93.24%Jul 18, 2022
- UnknownApache Struts Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')Patch nowKEVEPSS 85.43%May 11, 2022
- UnknownApache Struts CookieInterceptor VulnerabilityPatch nowKEVEPSS 78.32%May 11, 2022
- UnknownApache Struts ParametersInterceptor ClassLoader Maniupulation VulnerabilityPatch nowKEVEPSS 98.06%May 11, 2022
- UnknownApache Struts ParametersInterceptor VulnerabilityPatch nowKEVEPSS 99.39%May 11, 2022
- UnknownApache log4j Deserialization of Untrusted DataPatch nowKEVEPSS 80.60%Apr 26, 2022
- UnknownApache druid Incorrect AuthorizationPatch nowKEVEPSS 80.91%Mar 20, 2022
- UnknownApache druid Externally Controlled Reference to a Resource in Another SpherePatch nowKEVEPSS 9.50%Mar 20, 2022
- Critical9.8Apache CouchDB Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 92.51%Mar 6, 2022
- Unknownapache2 CVE-2020-11984Patch nowKEVEPSS 90.04%Feb 22, 2022
- Unknownapache2 CVE-2019-10098Patch nowKEVEPSS 73.98%Feb 22, 2022