Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownteltonika rut900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 70.66%Dec 31, 2023
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.37%Dec 29, 2023
- Medium6.1undsgn uncode Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Dec 28, 2023
- Unknownsahipro sahi_pro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 46.06%Dec 28, 2023
- Unknownwebtoprint web_to_print_shop\ Files or Directories Accessible to External PartiesPatch nowKEVEPSS 7.88%Dec 25, 2023
- Unknownincomcms_project incomcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 71.33%Dec 25, 2023
- Unknownmidasolutions eframework Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 98.24%Dec 25, 2023
- High7.8Spreadsheet::ParseExcel Remote Code Execution VulnerabilityPatch nowKEVEPSS 18.96%Dec 24, 2023
- UnknownBarracuda ESG Appliance ParseExcel Code Execution VulnerabilityPatch nowKEVEPSS 44.57%Dec 24, 2023
- UnknownSolarWinds Serv-U Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.80%Dec 24, 2023
- UnknownHP edgeline_infrastructure_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 68.29%Dec 24, 2023
- Unknownhongdian h8922 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 27.91%Dec 24, 2023
- Unknowndgtl huemagic Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.33%Dec 24, 2023
- Unknownkaswara_project kaswara Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 42.14%Dec 24, 2023
- Unknownpatreon patreon_wordpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.93%Dec 24, 2023
- Unknownadvantech r-seenet Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 69.84%Dec 24, 2023
- UnknownWordPress BuddyBoss Theme Authentication VulnerabilityPatch nowKEVEPSS 0.70%Dec 23, 2023
- Unknownwpdevart booking_calendar Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.81%Dec 23, 2023
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 97.80%Dec 23, 2023
- Unknownkainelabs youzify Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.81%Dec 23, 2023
- UnknownKaseya vsa Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 60.35%Dec 23, 2023
- Unknowncse_bookstore_project cse_bookstore Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.05%Dec 21, 2023
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 55.79%Dec 20, 2023
- UnknownVMware vRealize Log Insight Information DisclosurePatch nowKEVEPSS 22.63%Dec 20, 2023
- UnknownVMware vrealize_log_insight Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 87.08%Dec 20, 2023
Sort