Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache Struts ParametersInterceptor VulnerabilityPatch nowKEVEPSS 99.39%May 11, 2022
- UnknownPortable phpMyAdmin Plugin before 1.3.1 for WordPress Authentication BypassPatch nowKEVEPSS 23.75%May 11, 2022
- High8.8Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityPatch nowKEVEPSS 83.50%May 10, 2022
- Medium5.9Microsoft Windows LSA Spoofing VulnerabilityPatch nowKEVEPSS 10.48%May 10, 2022
- Critical9.8pluginbazaar order_listener_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.88%May 9, 2022
- High7.5RARLAB UnRAR Directory Traversal VulnerabilityPatch nowKEVEPSS 99.23%May 9, 2022
- Critical9.810web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 43.35%May 2, 2022
- UnknownCloudways Breeze Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 0.57%May 2, 2022
- UnknownApache log4j Deserialization of Untrusted DataPatch nowKEVEPSS 80.60%Apr 26, 2022
- Critical9.8Mitel MiVoice Connect Data Validation VulnerabilityPatch nowKEVEPSS 55.24%Apr 25, 2022
- Medium6.1welaunch wordpress_country_selector Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.40%Apr 25, 2022
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 17.63%Apr 20, 2022
- High7.2Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 98.68%Apr 20, 2022
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityPatch nowKEVEPSS 93.91%Apr 20, 2022
- Critical9.8Oracle ADF Faces Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 62.48%Apr 19, 2022
- Critical9.8microfinance_management_system_project microfinance_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.83%Apr 19, 2022
- Critical9.8daily_prayer_time_project daily_prayer_time Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.04%Apr 18, 2022
- Critical9.8WSO2 Multiple Products Unrestrictive Upload of File VulnerabilityPatch nowKEVEPSS 100.00%Apr 18, 2022
- Medium6.8Zoho ManageEngine ADSelfService Plus Remote Code Execution VulnerabilityPatch nowKEVEPSS 70.97%Apr 14, 2022
- High7.0Microsoft Windows User Profile Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 16.95%Apr 14, 2022
- UnknownRemote Procedure Call Runtime Remote Code ExecutionPatch nowKEVEPSS 90.96%Apr 14, 2022
- Critical10.0OSGeo GeoServer JAI-EXT Code Injection VulnerabilityPatch nowKEVEPSS 99.91%Apr 13, 2022
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 13.92%Apr 13, 2022
- Unknownelementor Website Builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 92.66%Apr 13, 2022
- UnknownASRock RGB Driver AsrDrv103.sys Triple FaultPatch nowKEVEPSS 1.35%Apr 13, 2022
Sort