Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownipeak ipeakcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.57%Jul 25, 2024
- UnknownThinkPHP '_filename' in index.php Remote Code ExecutionPatch nowKEVEPSS 2.02%Jul 15, 2024
- Unknownavecnous event_post Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.52%Jul 11, 2024
- UnknownWBW Product Table plugin for WordPress saveCustomTitle VulnerabilityPatch nowKEVEPSS 1.21%Jul 8, 2024
- UnknownQuest kace_systems_management Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.55%Jun 29, 2024
- Unknownattribute_wizard_project attribute_wizard Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 12.33%Jun 28, 2024
- Unknowncoffee_shop_pos_system_project coffee_shop_pos_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.64%Jun 26, 2024
- UnknownPromokit.eu PrestaShop pkfacebook SQL InjectionPatch nowKEVEPSS 10.09%Jun 24, 2024
- UnknownARForms - Premium WordPress Form Builder Plugin for WordPress PHP Code Upload VulnerabilityPatch nowKEVEPSS 3.35%Jun 7, 2024
- Critical9.8PHP-CGI OS Command Injection VulnerabilityPatch nowKEVEPSS 99.99%Jun 7, 2024
- UnknownControl Web Panel (CWP), CentOS Web Panel Preauth Remote Code ExecutionPatch nowKEVEPSS 70.75%May 15, 2024
- UnknownphpMyAdmin phpMyAdmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 81.37%May 10, 2024
- UnknownPHP PHP Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 21.79%May 6, 2024
- UnknownPHP ZIP Extension _zip_cdir_new Integer OverflowPatch nowKEVEPSS 27.39%May 6, 2024
- UnknownChatGPT pictureproxy.php Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 40.64%Apr 27, 2024
- Unknownidangero chop_slider Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 95.66%Apr 27, 2024
- Unknownphpshe phpshe Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.04%Apr 21, 2024
- UnknownThinkPHP ThinkPHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 30.24%Apr 11, 2024
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.59%Apr 3, 2024
- UnknownFCKeditor before 2.3 Beta editor/filemanager/upload/php/upload.php Arbitrary File UploadPatch nowKEVEPSS 2.42%Mar 28, 2024
- UnknownSunshine Photo Cart Plugin PHP Object InjectionPatch nowKEVEPSS 0.46%Mar 26, 2024
- UnknownTourfic Plugin PHP Object InjectionPatch nowKEVEPSS 0.63%Mar 18, 2024
- UnknownGuangzhou Yingke Electronic Technology Ncast up to 2017 Information DisclosurePatch nowKEVEPSS 66.93%Mar 17, 2024
- UnknownWordPress Premmerce Permalink Manager for WooCommerce Plugin Local File InclusionPatch nowKEVEPSS 1.46%Mar 13, 2024
- UnknownWeaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 28.48%Mar 7, 2024
Sort