Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownicinga icinga_web_2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 89.38%Jan 22, 2024
- Unknownwpwax directorist Missing AuthorizationPatch nowKEVEPSS 1.84%Jan 22, 2024
- Unknownsyntacticsinc easync Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 24.64%Jan 22, 2024
- Unknownmapsvg mapsvg Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.17%Jan 22, 2024
- UnknownD-Link dap-1620_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 58.88%Jan 22, 2024
- UnknownD-Link dir-850l_firmware URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 15.77%Jan 22, 2024
- Unknownpascom cloud_phone_system Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.80%Jan 22, 2024
- UnknownThinfinity VirtualUI before 3.0 lab.html IFRAME InjectionPatch nowKEVEPSS 40.58%Jan 22, 2024
- Unknownapereo central_authentication_service Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.19%Jan 22, 2024
- Unknownonline-shopping-system-advanced_project online-shopping-system-advanced Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 51.77%Jan 22, 2024
- Unknownecoa ecs_router_controller-ecs_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 19.87%Jan 22, 2024
- Unknownmin minio_console Missing Authentication for Critical FunctionPatch nowKEVEPSS 48.13%Jan 22, 2024
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 19.26%Jan 22, 2024
- Unknownbinatoneglobal halo\+_camera_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 60.16%Jan 22, 2024
- UnknownCommvault commcell Improper AuthenticationPatch nowKEVEPSS 5.42%Jan 22, 2024
- Unknownseopress seopress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Jan 22, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
- Unknownsfcyazilim sonlogger Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 47.52%Jan 22, 2024
- UnknownLumis lumis_experience_platform Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 18.13%Jan 22, 2024
- Unknownvoid aurall_rec_monitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.25%Jan 22, 2024
- UnknownWPDeveloper simple_301_redirects Missing AuthorizationPatch nowKEVEPSS 1.11%Jan 22, 2024
- Unknownde-baat store_locator_plus Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.83%Jan 22, 2024
- Unknowncars-seller-auto-classifieds-script_project cars-seller-auto-classifieds-script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.70%Jan 22, 2024
- UnknownFortinet FortiWeb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 10.52%Jan 22, 2024
- UnknownZTE mf971r_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 55.71%Jan 22, 2024
Sort