Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1davidstutz bootstrap_multiselect Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.44%May 13, 2025
- Critical10.0netalertx netalertx Missing Authentication for Critical FunctionPatch nowKEVEPSS 62.67%May 13, 2025
- High8.6netalertx netalertx Execution After Redirect (EAR)Patch nowKEVEPSS 67.91%May 12, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- Medium6.9oretnom23 stock_management_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.66%May 5, 2025
- Critical9.4showdoc showdoc Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.65%Apr 29, 2025
- UnknownLaravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Apr 29, 2025
- UnknownInstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.60%Apr 11, 2025
- Unknowninfornweb news_\&_blog_designer_pack Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.84%Apr 1, 2025
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Deserialization of Untrusted DataPatch nowKEVEPSS 0.59%Mar 27, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 78.36%Mar 27, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 28.72%Mar 27, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.96%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.15%Mar 21, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.88%Mar 19, 2025
- Unknownrevmakx backup_and_staging_by_wp_time_capsule Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 94.14%Mar 19, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 76.80%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.54%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.69%Mar 19, 2025
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.38%Mar 10, 2025
- Unknownusualtool usualtoolcms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.62%Feb 18, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- Unknownafterlogic aurora Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.90%Jan 22, 2025
Sort