Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityKEVEPSS 94.7%Oct 29, 2024
- Critical9.8Cleo Multiple Products Unrestricted File Upload VulnerabilityKEVEPSS 98.6%Oct 27, 2024
- Critical9.8Fortinet FortiManager Missing Authentication VulnerabilityKEVEPSS 94.8%Oct 23, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityKEVEPSS 93.0%Aug 29, 2024
- Critical9.1SolarWinds Web Help Desk Hardcoded Credential VulnerabilityKEVEPSS 93.3%Aug 21, 2024
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityKEVEPSS 100.0%Aug 13, 2024
- Critical9.8Samsung MagicINFO 9 Server Path Traversal VulnerabilityKEVEPSS 91.9%Aug 12, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityKEVEPSS 99.4%Aug 5, 2024
- Critical9.8Acronis Cyber Infrastructure (ACI) Insecure Default Password VulnerabilityKEVEPSS 53.3%Jul 24, 2024
- Critical9.3Palo Alto Networks Expedition Missing Authentication VulnerabilityKEVEPSS 91.7%Jul 10, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityKEVEPSS 99.8%Jul 1, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityKEVEPSS 100.0%Jun 13, 2024
- High7.8Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference VulnerabilityKEVEPSS 25.2%Jun 11, 2024
- High7.0Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityKEVEPSS 68.2%Jun 11, 2024
- Critical9.8PHP-CGI OS Command Injection VulnerabilityKEVEPSS 100.0%Jun 9, 2024
- High7.5SolarWinds Serv-U Path Traversal VulnerabilityKEVEPSS 99.6%Jun 6, 2024
- High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityKEVEPSS 99.9%May 31, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityKEVEPSS 99.5%May 31, 2024
- Critical9.8Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityKEVEPSS 97.5%May 29, 2024
- High8.6Check Point Quantum Security Gateways Information Disclosure VulnerabilityKEVEPSS 100.0%May 28, 2024
- Critical9.8Apache OFBiz Path Traversal VulnerabilityKEVEPSS 99.9%May 8, 2024
- Critical10.0CrushFTP VFS Sandbox Escape VulnerabilityKEVEPSS 99.5%Apr 22, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityKEVEPSS 99.2%Apr 22, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityKEVEPSS 100.0%Apr 12, 2024
- High7.4Adobe ColdFusion Improper Access Control VulnerabilityKEVEPSS 98.5%Mar 18, 2024