Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownrepetier-server repetier-server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.57%Jan 13, 2025
- UnknownAltenergy Power Control Software SQL InjectionPatch nowKEVEPSS 3.67%Dec 24, 2024
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
- Unknownmimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.31%Dec 16, 2024
- UnknownVanna DuckDB Integration SQL Injection VulnerabilityPatch nowKEVEPSS 3.42%Dec 5, 2024
- UnknownOS4ED openSIS-Classic SQL Injection VulnerabilityPatch nowKEVEPSS 2.26%Dec 5, 2024
- UnknownFOG packages/web/lib/fog/reportmaker.class.php Command Injection VulnerabilityPatch nowKEVEPSS 23.24%Dec 5, 2024
- UnknownF-logic DataCube3 /admin/transceiver_schedule.php File Upload VulnerabilityPatch nowKEVEPSS 12.75%Dec 5, 2024
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 23.22%Dec 5, 2024
- Unknownsuperwebmailer superwebmailer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Dec 5, 2024
- Critical9.8ProjectSend Improper Authentication VulnerabilityPatch nowKEVEPSS 91.85%Nov 26, 2024
- Unknownzzzcms zzzphp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.64%Nov 26, 2024
- Unknownrevive-adserver revive_adserver URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 69.56%Nov 20, 2024
- UnknownChartify WordPress Chart Plugin For WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 4.81%Nov 14, 2024
- UnknownWordPress Mega Menu plugin for WordPress compiler_save AJAX Action VulnerabilityPatch nowKEVEPSS 0.67%Oct 15, 2024
- UnknownSiteGround Optimizer plugin for WordPress switch_php Function VulnerabilityPatch nowKEVEPSS 0.85%Oct 15, 2024
- UnknownAdvanced Access Manager plugin for WordPress aam-media Parameter VulnerabilityPatch nowKEVEPSS 2.77%Oct 15, 2024
- UnknownFile Manager plugin for WordPress /inc/root.php File Upload VulnerabilityPatch nowKEVEPSS 0.81%Oct 15, 2024
- UnknownAngular-base64-upload demo/server.php VulnerabilityPatch nowKEVEPSS 40.21%Oct 14, 2024
- UnknownQualitor checkAcesso.php Remote Code Execution VulnerabilityPatch nowKEVEPSS 46.29%Oct 8, 2024
- UnknownNetentsec NS-ASG Application Security Gateway /protocol/index.php SQL Injection VulnerabilityPatch nowKEVEPSS 17.62%Sep 26, 2024
- UnknownSPIP porte_plume Plugin Arbitrary PHP Execution VulnerabilityPatch nowKEVEPSS 90.05%Sep 22, 2024
- Unknownmemberhero member_hero Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.44%Sep 19, 2024
- Unknowncozmoslabs profile_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.33%Sep 19, 2024
- Unknowncyberoamworks netgenie_c0101b1-20141120-ng11vo_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.66%Sep 19, 2024
Sort