Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownGitLab GitLab Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.59%Jan 15, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 89.81%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 90.98%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Jan 14, 2025
- High7.8Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityPatch nowKEVEPSS 1.40%Jan 14, 2025
- High7.8Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityPatch nowKEVEPSS 1.57%Jan 14, 2025
- High7.8Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 10.07%Jan 14, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.35%Jan 14, 2025
- Unknownrepetier-server repetier-server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.57%Jan 13, 2025
- Critical9.8SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityPatch nowKEVEPSS 95.31%Jan 9, 2025
- UnknownIvanti Connect Secure, Policy Secure, and Neurons stack-based buffer overflowPatch nowKEVEPSS 17.46%Jan 8, 2025
- Critical9.0Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Jan 8, 2025
- UnknownGFI KerioControl HTTP Response Splitting VulnerabilityPatch nowKEVEPSS 29.34%Jan 8, 2025
- Critical9.8Aviatrix Controllers OS Command Injection VulnerabilityPatch nowKEVEPSS 98.52%Jan 7, 2025
- Unknownmi millet_router_3g_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 55.87%Jan 2, 2025
- Medium6.9DrayTek Vigor Routers OS Command Injection VulnerabilityPatch nowKEVEPSS 98.16%Dec 27, 2024
- High8.7Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityPatch nowKEVEPSS 29.12%Dec 27, 2024
- UnknownD-Link DIR-845L HNAP OS Command InjectionPatch nowKEVEPSS 6.46%Dec 26, 2024
- UnknownD-Link GO-RT-AC750 HNAP OS Command InjectionPatch nowKEVEPSS 10.39%Dec 26, 2024
- UnknownJeecgBoot /onlDragDatasetHead/getTotalData SQL Injection VulnerabilityPatch nowKEVEPSS 50.02%Dec 24, 2024
- UnknownAltenergy Power Control Software SQL InjectionPatch nowKEVEPSS 3.67%Dec 24, 2024
- Unknownsalesagility suitecrm Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.00%Dec 24, 2024
- UnknownCassia Gateway Firmware XC1000 and XC2000 queueUrl Parameter VulnerabilityPatch nowKEVEPSS 61.08%Dec 21, 2024
- Critical9.8Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 8.97%Dec 20, 2024
- Unknownfiberhome an5506-01-a_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.08%Dec 20, 2024