Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWPvivid migration\,_backup\,_staging Improper Privilege ManagementPatch nowKEVEPSS 0.71%Jan 22, 2024
- UnknownExperience Manager, Experience Platform, and Experience Commerce Remote Code ExecutionPatch nowKEVEPSS 86.69%Jan 22, 2024
- Unknownmyeventon eventon Missing AuthorizationPatch nowKEVEPSS 42.67%Jan 22, 2024
- Unknownreadtomyshoe_project readtomyshoe Generation of Error Message Containing Sensitive InformationPatch nowKEVEPSS 3.86%Jan 22, 2024
- Unknownpyload pyload Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.91%Jan 22, 2024
- UnknownFontsy WordPress plugin through 1.8.6 SQL InjectionPatch nowKEVEPSS 4.76%Jan 22, 2024
- Unknownnajeebmedia woocommerce_checkout_field_manager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.43%Jan 22, 2024
- UnknownH3C gr3200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.80%Jan 22, 2024
- Unknownopenautomationsoftware oas_platform Missing Authentication for Critical FunctionPatch nowKEVEPSS 37.64%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 9.97%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 7.93%Jan 22, 2024
- Unknownzerof web_server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.35%Jan 22, 2024
- Unknownicinga icinga_web_2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 89.38%Jan 22, 2024
- Unknownwpwax directorist Missing AuthorizationPatch nowKEVEPSS 1.84%Jan 22, 2024
- Unknownsyntacticsinc easync Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 24.64%Jan 22, 2024
- Unknownmapsvg mapsvg Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.17%Jan 22, 2024
- UnknownD-Link dap-1620_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 58.88%Jan 22, 2024
- UnknownD-Link dir-850l_firmware URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 15.77%Jan 22, 2024
- Unknownpascom cloud_phone_system Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.80%Jan 22, 2024
- UnknownThinfinity VirtualUI before 3.0 lab.html IFRAME InjectionPatch nowKEVEPSS 40.58%Jan 22, 2024
- Unknownapereo central_authentication_service Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.19%Jan 22, 2024
- Unknownonline-shopping-system-advanced_project online-shopping-system-advanced Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 51.77%Jan 22, 2024
- Unknownecoa ecs_router_controller-ecs_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 19.87%Jan 22, 2024
- Unknownmin minio_console Missing Authentication for Critical FunctionPatch nowKEVEPSS 48.13%Jan 22, 2024
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 19.26%Jan 22, 2024