Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Microsoft Windows Scripting Engine Type Confusion VulnerabilityKEVEPSS 27.0%May 13, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityKEVEPSS 99.8%Apr 25, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityKEVEPSS 100.0%Apr 7, 2025
- Critical9.8CrushFTP Authentication Bypass VulnerabilityKEVEPSS 100.0%Apr 3, 2025
- High8.3Google Chromium Mojo Sandbox Escape VulnerabilityKEVEPSS 9.2%Mar 26, 2025
- Medium5.4Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityKEVEPSS 58.9%Mar 11, 2025
- High7.0Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityKEVEPSS 30.4%Mar 11, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityKEVEPSS 99.9%Mar 10, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityKEVEPSS 99.9%Feb 20, 2025
- Critical10.0Apple Multiple Products Use-After-Free VulnerabilityKEVEPSS 17.5%Jan 27, 2025
- High7.8Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow VulnerabilityKEVEPSS 10.0%Jan 14, 2025
- Critical9.0Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityKEVEPSS 100.0%Jan 8, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityKEVEPSS 26.2%Dec 10, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityKEVEPSS 94.7%Oct 29, 2024
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation VulnerabilityKEVEPSS 28.7%Aug 13, 2024
- Critical9.3Palo Alto Networks Expedition Missing Authentication VulnerabilityKEVEPSS 91.7%Jul 10, 2024
- Critical9.3ServiceNow Improper Input Validation VulnerabilityKEVEPSS 100.0%Jul 10, 2024
- Critical9.8PHP-CGI OS Command Injection VulnerabilityKEVEPSS 100.0%Jun 9, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 73.3%Jun 6, 2024
- High7.5SolarWinds Serv-U Path Traversal VulnerabilityKEVEPSS 99.6%Jun 6, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityKEVEPSS 99.5%May 31, 2024
- Critical9.8Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityKEVEPSS 97.5%May 29, 2024
- Critical9.8Apache OFBiz Path Traversal VulnerabilityKEVEPSS 99.9%May 8, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityKEVEPSS 99.2%Apr 22, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityKEVEPSS 100.0%Apr 12, 2024