Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncontec sv-cpt-mc310_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.43%Jul 5, 2023
- Unknownthinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.93%Jul 5, 2023
- Unknownfastweb fastgate_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.82%Jul 5, 2023
- UnknownLinksys wap54g_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 20.79%Jul 5, 2023
- Unknownsrbtranslatin_project srbtranslatin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.24%Jul 4, 2023
- UnknownApple ipados Out-of-bounds WritePatch nowKEVEPSS 0.56%Jul 1, 2023
- High7.8Microsoft Windows Error Reporting Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 42.56%Jun 30, 2023
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 49.08%Jun 29, 2023
- UnknownThe Ultimate Member WordPress plugin before 2.6.7 Privilege EscalationPatch nowKEVEPSS 72.31%Jun 29, 2023
- UnknownFavethemes Houzez Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.68%Jun 28, 2023
- UnknownWin32k Elevation of PrivilegePatch nowKEVEPSS 5.93%Jun 28, 2023
- UnknownLearnDash LMS plugin for WordPress Insecure Direct Object References VulnerabilityPatch nowKEVEPSS 2.23%Jun 27, 2023
- UnknownAbandoned Cart Lite for WooCommerce plugin for WordPres Authentication Bypass VulnerabilityPatch nowKEVEPSS 42.54%Jun 23, 2023
- Unknownwp-experts protect_wp_admin URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.73%Jun 22, 2023
- UnknownTenda ax3_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.77%Jun 22, 2023
- Unknownapsystems ecu-r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 76.60%Jun 22, 2023
- Unknownintelbras wifiber_120ac_inmesh_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 35.03%Jun 22, 2023
- Unknowncommscope arris_tr3300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.07%Jun 22, 2023
- UnknownVMware workstation Uncontrolled Search Path ElementPatch nowKEVEPSS 9.03%Jun 22, 2023
- High8.8Apple Multiple Products WebKit Type Confusion VulnerabilityPatch nowKEVEPSS 23.97%Jun 21, 2023
- High7.8Apple Multiple Products Integer Overflow VulnerabilityPatch nowKEVEPSS 51.52%Jun 21, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.83%Jun 20, 2023
- Critical9.8Zyxel Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 82.26%Jun 19, 2023
- UnknownMStore API plugin for WordPress Priviledge Escalation VulnerabilityPatch nowKEVEPSS 2.89%Jun 19, 2023
- High8.4Microsoft Streaming Service Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 21.62%Jun 13, 2023
Sort