Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5gopiplus email_posts_to_subscribers Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.67%Nov 30, 2023
- High7.5ewww image_optimizer Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.02%Nov 30, 2023
- High8.8Apple Multiple Products WebKit Memory Corruption VulnerabilityPatch nowKEVEPSS 9.29%Nov 30, 2023
- Medium6.5Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 17.82%Nov 30, 2023
- Unknownhome-assistant home-assistant Improper AuthenticationPatch nowKEVEPSS 72.17%Nov 30, 2023
- Unknownspeakout\!_email_petitions_project speakout\!_email_petitions Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.79%Nov 30, 2023
- Unknownpresspage bestbooks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.13%Nov 30, 2023
- Unknownwp-video-gallery-free_project wp-video-gallery-free Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.13%Nov 30, 2023
- Unknownusersultra users_ultra Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.33%Nov 30, 2023
- UnknownQuantumCloud infographic_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.88%Nov 30, 2023
- Unknownwptaskforce wpcargo_track_\&_trace Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 56.15%Nov 30, 2023
- UnknownSAP scimono Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 10.12%Nov 30, 2023
- UnknownCitrix ShareFile Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 27.15%Nov 30, 2023
- Unknowndragonfly_project dragonfly Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 72.14%Nov 29, 2023
- Unknownbuddypress buddypress Incorrect AuthorizationPatch nowKEVEPSS 13.52%Nov 29, 2023
- Unknownlucee lucee_server Missing AuthorizationPatch nowKEVEPSS 89.19%Nov 29, 2023
- Unknowninfluxdata influxdb Improper AuthenticationPatch nowKEVEPSS 30.92%Nov 29, 2023
- Critical9.8Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityPatch nowKEVEPSS 2.09%Nov 28, 2023
- UnknownMultiple plugins by Crocoblock for WordPress Authorization BypassPatch nowKEVEPSS 0.45%Nov 28, 2023
- UnknownZyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 Remote Information DisclosurePatch nowKEVEPSS 57.78%Nov 28, 2023
- UnknownAmcrest ipm-721s_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 3.80%Nov 28, 2023
- UnknownJEECG jeecg-boot Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.48%Nov 27, 2023
- UnknownSteveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 SQL InjectionPatch nowKEVEPSS 4.95%Nov 27, 2023
- Unknowngenetechsolutions pie_register URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 24.26%Nov 27, 2023
- Unknownadmin_word_count_column_project admin_word_count_column Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 21.88%Nov 27, 2023
Sort