Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft SharePoint Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.42%Jan 21, 2021
- UnknownJQuery JQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 29.73%Jan 21, 2021
- UnknownRed Hat cloudforms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 26.72%Dec 28, 2020
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.64%Dec 14, 2020
- Unknownwp-ecommerce easy_wp_smtp Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 60.38%Dec 13, 2020
- High7.5A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.Check if you run itEPSS 3.15%Dec 8, 2020
- Unknowngvectors wpdiscuz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.61%Dec 6, 2020
- Unknownbeckhoff ipc_diagnostics Improper Access ControlPatch nowKEVEPSS 5.74%Dec 1, 2020
- Unknownrocketsoftware rocket_servergraph Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 72.61%Dec 1, 2020
- Unknownmicasaverde veralite_firmware Improper AuthenticationPatch nowKEVEPSS 12.18%Dec 1, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
- Unknownszuray iptv\/h.264_video_encoder_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 40.30%Nov 6, 2020
- UnknownGrandstream gac2500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.47%Oct 14, 2020
- Unknownopenmrs openmrs Deserialization of Untrusted DataPatch nowKEVEPSS 98.71%Oct 14, 2020
- Critical9.8SonicWall SonicOS Buffer Overflow VulnerabilityPatch nowKEVEPSS 26.87%Oct 12, 2020
- UnknownDenial of Service by requesting to reset a passwordOpen the advisoryOct 3, 2020
- High7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP reques…Check if you run itEPSS 6.36%Sep 27, 2020
- High7.5By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression.Check this weekEPSS 49.18%Sep 1, 2020
- High8.8TP-link TL-WA855RE Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 22.19%Aug 31, 2020
- UnknownCalmar Webmedia Total Donations plugin through 2.0.5 for WordPress migla_ajax_functions.php Security BypassPatch nowKEVEPSS 26.08%Aug 22, 2020
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 87.48%Aug 12, 2020
- High7.5Cisco ASA and FTD Read-Only Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Jul 22, 2020
- High7.8Qualcomm Multiple Chipsets Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.60%Jul 20, 2020
- Critical10.0Microsoft Windows DNS Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.72%Jul 14, 2020
- High7.5VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityPatch nowKEVEPSS 95.59%Jun 2, 2020
Sort