Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTutor LMS Pro plugin for WordPress authenticate function VulnerabilityPatch nowKEVEPSS 1.01%May 16, 2024
- UnknownphpMyAdmin phpMyAdmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 81.37%May 10, 2024
- UnknownMStore API plugin for WordPress Add Listing REST API Authentication BypassPatch nowKEVEPSS 67.28%May 6, 2024
- UnknownAdobe ColdFusion Improper Access ControlPatch nowKEVEPSS 10.07%May 6, 2024
- UnknownWPEverest User Registration - Custom Registration Form, Login Form, and User Profile WordPress Plugin form_save_action VulnerabilityPatch nowKEVEPSS 0.94%May 2, 2024
- Critical9.8CrushFTP Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.97%Apr 26, 2024
- Medium6.0Cisco ASA and FTD Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.43%Apr 24, 2024
- High7.2VMware ESXi Authentication Bypass VulnerabilityPatch nowKEVEPSS 26.77%Apr 23, 2024
- UnknownWooCommerce woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.26%Apr 20, 2024
- Critical10.0CrushFTP VFS Sandbox Escape VulnerabilityPatch nowKEVEPSS 99.54%Apr 19, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/policies/validation/condition/Patch nowKEVEPSS 7.89%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/events/subscriptions/validation/condition/Patch nowKEVEPSS 45.73%Apr 17, 2024
- Unknownchurch_admin_project church_admin Missing AuthorizationPatch nowKEVEPSS 0.34%Apr 5, 2024
- Unknownchurch_admin_project church_admin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.63%Apr 5, 2024
- Unknownchurch_admin_project church_admin Missing AuthorizationPatch nowKEVEPSS 0.47%Mar 28, 2024
- Unknownchurch_admin_project church_admin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.66%Mar 26, 2024
- UnknownMiniOrange Malware Scanner plugin and Web Application Firewall plugin for WordPress Priviledge Escalation VulnerabilityPatch nowKEVEPSS 1.71%Mar 21, 2024
- High7.4Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 98.51%Mar 18, 2024
- High7.3JetBrains TeamCity Relative Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Mar 4, 2024
- Critical9.8JetBrains TeamCity Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.94%Mar 4, 2024
- UnknownIvanti Connect Secure Privilege EscalationPatch nowKEVEPSS 85.42%Feb 29, 2024
- Critical9.8Progress Kemp LoadMaster OS Command Injection VulnerabilityPatch nowKEVEPSS 95.39%Feb 21, 2024
- Critical10.0ConnectWise ScreenConnect Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Feb 20, 2024
- UnknownSchneider Electric evlink_city_evc1s22p4_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 64.61%Feb 14, 2024
- UnknownSamba Samba Improper Input ValidationPatch nowKEVEPSS 3.25%Feb 8, 2024
Sort