Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.72%Jan 8, 2019
- Critical10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2…Check this weekEPSS 10.46%Jan 2, 2019
- High7.5Apache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Dec 13, 2018
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.53%Dec 11, 2018
- Critical9.8Paessler PRTG Network Monitor Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.94%Nov 21, 2018
- Unknownvan-ons wp-gdpr-compliance Direct Request ('Forced Browsing')Patch nowKEVEPSS 88.06%Nov 9, 2018
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Improper Input ValidationPatch nowKEVEPSS 4.38%Oct 31, 2018
- Critical9.8Tenda AC7, AC9, and AC10 Routers Command Injection VulnerabilityPatch nowKEVEPSS 8.51%Oct 30, 2018
- Medium4.3When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.Check this weekEPSS 97.68%Oct 4, 2018
- Unknownmodx modx_revolution Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 64.09%Sep 26, 2018
- Medium5.4In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a m…Check if you run itEPSS 4.80%Jul 26, 2018
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.58%Jul 24, 2018
- UnknownASUS WRT firmware common.c in infosvr Remote Code ExecutionPatch nowKEVEPSS 80.23%Jul 13, 2018
- UnknownCisco linksys_e4200_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 16.87%Jul 13, 2018
- UnknownMiniUPnPd before 1.4 ProcessSSDPRequest Denial of ServicePatch nowKEVEPSS 76.40%Jul 13, 2018
- High7.5Cisco Adaptive Security Appliance (ASA) Denial-of-Service VulnerabilityPatch nowKEVEPSS 99.91%Jun 7, 2018
- UnknownWindows SMB Server Elevation of Privilege VulnerabilityPatch nowKEVEPSS 43.49%Jun 1, 2018
- Critical9.8Quest KACE System Management Appliance Remote Command Execution VulnerabilityPatch nowKEVEPSS 91.72%May 31, 2018
- Unknowni-lan draytekl_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.51%May 18, 2018
- Critical9.8Dasan GPON Routers Command Injection VulnerabilityPatch nowKEVEPSS 99.95%May 3, 2018
- Critical9.8VMware Tanzu Spring Data Commons Property Binder VulnerabilityPatch nowKEVEPSS 96.96%Apr 11, 2018
- Medium6.3Cisco IOS Software Resource Management Errors VulnerabilityPatch nowKEVEPSS 4.12%Mar 28, 2018
- UnknownMikroTik RouterOS Out-of-bounds WritePatch nowKEVEPSS 2.47%Mar 28, 2018
- Critical9.8MikroTik RouterOS Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 60.81%Mar 19, 2018
- Critical9.8A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loadiCheck if you run itEPSS 2.98%Feb 19, 2018
Sort