Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownchurch_admin_project church_admin Missing AuthorizationPatch nowKEVEPSS 0.47%Mar 28, 2024
- Unknownmailster mailster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 28, 2024
- Unknownposimyth nexter_blocks Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.42%Mar 28, 2024
- UnknownFCKeditor before 2.3 Beta editor/filemanager/upload/php/upload.php Arbitrary File UploadPatch nowKEVEPSS 2.42%Mar 28, 2024
- Unknownchurch_admin_project church_admin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.66%Mar 26, 2024
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 0.62%Mar 26, 2024
- UnknownSunshine Photo Cart Plugin PHP Object InjectionPatch nowKEVEPSS 0.46%Mar 26, 2024
- Unknowncastos seriously_simple_podcasting Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 26, 2024
- Unknownanyscale ray Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 83.94%Mar 26, 2024
- UnknownWP Lab wp-lister_lite_for_amazon Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.40%Mar 25, 2024
- Unknownsunshinephotocart sunshine_photo_cart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.72%Mar 25, 2024
- UnknownCodeCabin wp_go_maps Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 25, 2024
- Unknownunlimited-elements unlimited_elements_for_elementor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.74%Mar 25, 2024
- Unknownincsub forminator Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 25, 2024
- Critical9.8Tenda ac15_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.01%Mar 24, 2024
- UnknownQNAP QTS Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 1.56%Mar 24, 2024
- High7.5Microsoft .NET Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 98.62%Mar 22, 2024
- UnknownIBM operational_decision_manager Deserialization of Untrusted DataPatch nowKEVEPSS 73.40%Mar 22, 2024
- UnknownMiniOrange Malware Scanner plugin and Web Application Firewall plugin for WordPress Priviledge Escalation VulnerabilityPatch nowKEVEPSS 1.71%Mar 21, 2024
- UnknownCrushFTP CrushFTP Improper Control of Dynamically-Managed Code ResourcesPatch nowKEVEPSS 81.80%Mar 21, 2024
- UnknownMicrosoft Word Remote Code ExecutionPatch nowKEVEPSS 84.80%Mar 21, 2024
- UnknownLinksys E2000 Ver.1.0.06 build 1 Authentication BypassPatch nowKEVEPSS 26.66%Mar 19, 2024
- High7.4Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 98.51%Mar 18, 2024
- Unknowndev.institute restrict_user_access Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Mar 18, 2024
- UnknownThemefic Tourfic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Mar 18, 2024
Sort