Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Dec 6, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.96%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Sep 29, 2021
- UnknownApache OFBiz Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 98.93%Sep 22, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- UnknownApache Shiro with Spring Dynamic Controllers Authentication BypassPatch nowKEVEPSS 23.33%Apr 12, 2021
- UnknownApache unomi Improper Input ValidationPatch nowKEVEPSS 68.30%Apr 12, 2021
- UnknownApache Unomi OGNL Scripting VulnerabilityPatch nowKEVEPSS 30.61%Apr 12, 2021
- UnknownApache olingo Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 12.25%Apr 12, 2021
- UnknownApache Tomcat Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 99.92%Apr 12, 2021
- UnknownApache Solr Deserialization of Untrusted DataPatch nowKEVEPSS 78.23%Apr 12, 2021
- High7.5When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and…Check this weekEPSS 18.11%Mar 1, 2021
- High7.5Apache Flink Improper Access Control VulnerabilityPatch nowKEVEPSS 97.81%Jan 5, 2021
- Critical9.8Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 95.93%Dec 10, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
- UnknownApache Struts Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 96.95%Sep 14, 2020
- High8.8Apache Airflow Command InjectionPatch nowKEVEPSS 99.19%Jul 16, 2020
- High8.8Apache Kylin OS Command Injection VulnerabilityPatch nowKEVEPSS 97.34%May 22, 2020
- High7.0When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents an…Check this weekEPSS 55.52%May 20, 2020
- Critical9.8Apache Tomcat Improper Privilege Management VulnerabilityPatch nowKEVEPSS 99.27%Feb 24, 2020
- High7.8EyesOfNetwork Improper Privilege Management VulnerabilityPatch nowKEVEPSS 60.08%Feb 6, 2020
- UnknownApache Hadoop 2.7.3 and 2.7.4 YARN NodeManager Password DisclosurePatch nowKEVEPSS 3.57%Jan 16, 2020
- High7.5Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.57%Dec 30, 2019
- Unknownnetgain-systems enterprise_manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.15%Dec 13, 2019
- High7.2Apache Solr DataImportHandler Code Injection VulnerabilityPatch nowKEVEPSS 83.55%Aug 1, 2019