CVE Catalog
636 confirmed 0-day vulnerabilities
| CVE ID ⬍ | Vendor / Product | Weakness | CVSS ⬍ | EPSS ⬍ | Confidence ⬍ | Mentions ⬍ | Sources | Published ▼ |
|---|---|---|---|---|---|---|---|---|
|
Ivanti
Connect Secure
|
— |
9.1
v3
|
1% |
85%
|
3 |
TheHack…
|
Feb 21, 2025 | |
|
Fortinet
FortiOS
|
CWE-288
Authentication Bypass by Alternate Path/Channel
|
9.6
v3
|
94% |
85%
|
9 |
Bleepin…
CERT-EU
CERT-FR
Tenable…
TheHack…
|
Jan 14, 2025 | |
|
Ivanti
Connect Secure
|
CWE-121
Stack-based Buffer Overflow
|
9.0
v3
|
94% |
95%
|
12 |
Bleepin…
CERT-EU
CERT-FR
TheHack…
|
Jan 08, 2025 | |
|
Ivanti
Connect Secure
|
CWE-121
Stack-based Buffer Overflow
|
7.0
v3
|
42% |
87%
|
4 |
Bleepin…
CERT-EU
CERT-FR
TheHack…
|
Jan 08, 2025 | |
|
BeyondTrust
Remote Support
|
CWE-77
Command Injection
|
9.8
v3
|
94% |
85%
|
10 |
Bleepin…
TheHack…
|
Dec 17, 2024 | |
|
oracle
agile product lifecycle management
|
CWE-863
Incorrect Authorization
|
7.5
v3
|
70% |
85%
|
3 |
TheHack…
|
Nov 18, 2024 | |
|
Palo Alto Networks
Cloud NGFW
|
CWE-78
OS Command Injection
|
6.9
v4
|
94% |
85%
|
10 |
Bleepin…
CERT-EU
Tenable…
TheHack…
|
Nov 18, 2024 | |
|
Google
Android
|
Logic Error |
7.3
v3
|
0% |
92%
|
7 |
Bleepin…
Securit…
TheHack…
|
Nov 13, 2024 | |
|
Qualcomm
DSP Service
|
CWE-416
Use After Free
|
7.8
v3
|
2% |
92%
|
11 |
Bleepin…
TheHack…
|
Oct 07, 2024 | |
|
Ivanti
CSA (Cloud Services Appliance)
|
CWE-22
Path Traversal
|
9.4
v3
|
94% |
85%
|
9 |
Bleepin…
CERT-FR
TheHack…
|
Sep 19, 2024 | |
|
Adobe
Acrobat Reader
|
CWE-416
Use After Free
|
7.8
v3
|
1% |
85%
|
2 |
Bleepin…
CERT-EU
|
Sep 13, 2024 | |
|
Versa
Director
|
— |
6.6
v3
|
5% |
92%
|
3 |
Bleepin…
TheHack…
|
Aug 22, 2024 | |
|
Apache Software Foundation
Apache OFBiz
|
CWE-863
Incorrect Authorization
|
8.1
v3
|
94% |
92%
|
2 |
TheHack…
|
Aug 05, 2024 | |
|
Cisco
Cisco NX-OS Software
|
CWE-78
OS Command Injection
|
6.0
v3
|
1% |
75%
|
3 |
Bleepin…
Qualys
TheHack…
|
Jul 01, 2024 | |
|
Red Hat
Red Hat Enterprise Linux 9
|
CWE-364
Signal Handler Race Condition
|
8.1
v3
|
63% |
85%
|
6 |
CERT-EU
CERT-FR
Qualys
TheHack…
|
Jul 01, 2024 | |
|
Unknown
|
— |
9.8
v3
|
82% |
85%
|
4 |
CERT-EU
TheHack…
|
Jun 18, 2024 | |
|
checkpoint
Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
|
CWE-200
Information Exposure
|
8.6
v3
|
94% |
95%
|
10 |
Bleepin…
CERT-EU
Qualys
TheHack…
|
May 28, 2024 | |
|
Unknown
|
— |
7.1
v3
|
0% |
85%
|
2 |
Bleepin…
TheHack…
|
May 14, 2024 | |
|
NA
VMware Workstation
|
— |
9.3
v3
|
0% |
85%
|
2 |
Bleepin…
TheHack…
|
May 14, 2024 | |
|
CrushFTP
CrushFTP
|
CWE-1336
Improper Neutralization of Special Elements Used in a Template Engine
|
9.8
v3
|
94% |
85%
|
5 |
Bleepin…
Qualys
SANS-ISC
TheHack…
|
Apr 22, 2024 | |
|
Apple
iOS
|
Memory Corruption |
7.8
v3
|
0% |
92%
|
4 |
Bleepin…
CERT-EU
TheHack…
|
Mar 05, 2024 | |
|
Microsoft
Windows 11 version 21H2
|
CWE-693
Protection Mechanism Failure
|
8.1
v3
|
94% |
85%
|
15 |
Bleepin…
CERT-EU
Qualys
TheHack…
|
Feb 13, 2024 | |
|
Microsoft
Windows
|
CWE-822
Untrusted Pointer Dereference
|
7.8
v3
|
80% |
92%
|
10 |
Bleepin…
Qualys
TheHack…
|
Feb 13, 2024 | |
|
Ivanti
ICS
|
— |
8.2
v3
|
94% |
92%
|
10 |
Bleepin…
CERT-EU
Qualys
TheHack…
|
Jan 31, 2024 | |
|
Ivanti
ICS
|
— |
8.8
v3
|
61% |
92%
|
5 |
Bleepin…
CERT-EU
TheHack…
|
Jan 31, 2024 |