Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownEclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5 Security BypassPatch nowKEVEPSS 99.33%Jan 12, 2023
- Unknowncozmoslabs profile_builder Improper AuthenticationPatch nowKEVEPSS 7.63%Jan 11, 2023
- UnknownThemeum tutor_lms Missing AuthorizationPatch nowKEVEPSS 1.44%Jan 11, 2023
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.74%Jan 11, 2023
- UnknownFormidable Forms WordPress plugin Remote Code Execution VulnerabilityPatch nowKEVEPSS 22.45%Jan 10, 2023
- High8.8Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 40.99%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_save_mega_menu_settings Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.70%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_import_library_template Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.61%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_final_settings_setup Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.61%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_fix_royal_compatibility Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.81%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_activate_required_theme VulnerabilityPatch nowKEVEPSS 0.83%Jan 10, 2023
- Unknownm-FILTER Email Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.71%Jan 6, 2023
- Critical9.8CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jan 5, 2023
- High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 80.14%Jan 4, 2023
- UnknownJeg Elementor Kit Plugin for WordPress MailChimp API Key VulnerabilityPatch nowKEVEPSS 1.63%Jan 3, 2023
- Unknownetoilewebdesign ultimate_faq Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.84%Dec 30, 2022
- Unknownetoilewebdesign ultimate_faq Missing Authentication for Critical FunctionPatch nowKEVEPSS 3.52%Dec 30, 2022
- Unknowntagdiv newspaper Improper Privilege ManagementPatch nowKEVEPSS 9.27%Dec 30, 2022
- Medium6.1php_curl_class_project php_curl_class Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.27%Dec 26, 2022
- UnknownUser Post Gallery WordPress plugin Callback Functions VulnerabilityPatch nowKEVEPSS 42.72%Dec 26, 2022
- Unknownyithemes yith_woocommerce_gift_cards Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 13.51%Dec 22, 2022
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.58%Dec 21, 2022
- UnknownTenda hg9_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.20%Dec 21, 2022
- UnknownLinuxKI Toolset 6.0-1 Remote Code ExecutionPatch nowKEVEPSS 98.75%Dec 21, 2022
- UnknownD-Link dir-619l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.40%Dec 21, 2022