Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownusualtool usualtoolcms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.62%Feb 18, 2025
- UnknownOracle WebLogic Server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.82%Feb 13, 2025
- UnknownPostgreSQL Quoting APIs SQL Injection VulnerabilityPatch nowKEVEPSS 90.03%Feb 13, 2025
- High7.1Palo Alto Networks PAN-OS File Read VulnerabilityPatch nowKEVEPSS 2.00%Feb 12, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK x6000r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.95%Feb 12, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.57%Feb 11, 2025
- High7.1Microsoft Windows Storage Link Following VulnerabilityPatch nowKEVEPSS 2.30%Feb 11, 2025
- UnknownDell emc_avamar Missing AuthorizationPatch nowKEVEPSS 50.87%Feb 11, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- Medium6.1Apple iOS and iPadOS Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.42%Feb 10, 2025
- UnknownFour-Faith F3x36 Router bapply.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.67%Feb 9, 2025
- Unknownmod_authnz_external_project mod_authnz_external Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.66%Feb 7, 2025
- High8.6Trimble Cityworks Deserialization VulnerabilityPatch nowKEVEPSS 31.09%Feb 6, 2025
- UnknownBridge Core Plugin for WordPress 'import_action' and 'install_plugin_per_demo' Bypass VulnerabilityPatch nowKEVEPSS 0.32%Feb 5, 2025
- High7.1Essential Addons for Elementor Reflected Cross Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 1.23%Feb 4, 2025
- UnknownNetis Router skk_get.cgi Information Disclosure VulnerabilityPatch nowKEVEPSS 6.29%Feb 4, 2025
- High7.5Advantive VeraCore SQL Injection VulnerabilityPatch nowKEVEPSS 55.55%Feb 3, 2025
- High8.8Advantive VeraCore Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 32.28%Feb 3, 2025
- UnknownWSO2 User Registration Arbitrary Account CreationPatch nowKEVEPSS 0.66%Feb 2, 2025
- Unknownabb aspect-ent-12_firmware Improper Validation of Specified Type of InputPatch nowKEVEPSS 19.01%Feb 2, 2025
- UnknownLiferay digital_experience_platform URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.97%Jan 29, 2025