Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHunk Companion Plugin Unauthenticated POST Request VulnerabilityPatch nowKEVEPSS 59.05%Dec 10, 2024
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 93.23%Dec 5, 2024
- UnknownOpenAPI Generator outputFolder VulnerabilityPatch nowKEVEPSS 3.59%Dec 5, 2024
- Unknownphonepe phonepe Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 37.67%Dec 5, 2024
- Unknownwavlink wl-wn531p3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.52%Dec 5, 2024
- Critical9.8ProjectSend Improper Authentication VulnerabilityPatch nowKEVEPSS 91.85%Nov 26, 2024
- Unknownecoa ecs_router_controller-ecs_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.43%Nov 26, 2024
- Unknownrocket.chat rocket.chat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 3.20%Nov 7, 2024
- UnknownBallistix MOD Utility MODAPI.sys Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.56%Nov 6, 2024
- UnknownIvanti Connect Secure and Policy Secure Out-of-bounds WritePatch nowKEVEPSS 18.99%Oct 30, 2024
- Unknownozette simple_mobile_url_redirect Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.61%Oct 30, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 84.40%Oct 29, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 94.75%Oct 26, 2024
- Critical9.8Fortinet FortiManager Missing Authentication VulnerabilityPatch nowKEVEPSS 94.77%Oct 23, 2024
- Medium5.8Cisco ASA and FTD Denial-of-Service VulnerabilityPatch nowKEVEPSS 15.87%Oct 23, 2024
- UnknownSpring Framework WebMvc.fn or WebFlux.fn Path Traversal VulnerabilityPatch nowKEVEPSS 14.72%Oct 22, 2024
- UnknownCisco hyperflex_hx_data_platform URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Oct 21, 2024
- UnknownFreemius SDK _get_debug_log, _get_db_option, and the _set_db_option Functions VulnerabilityPatch nowKEVEPSS 0.44%Oct 15, 2024
- UnknownMapplic and Mapplic Lite plugins for WordPress SVG File Server Side Request Forgery VulnerabilityPatch nowKEVEPSS 1.18%Oct 15, 2024
- UnknownD-Link dir-816_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.10%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- UnknownCups-browsed INADDR_ANY IPP Request VulnerabilityPatch nowKEVEPSS 50.60%Sep 27, 2024
- UnknownGradio save_url_to_cache Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 37.11%Sep 25, 2024
- UnknownSPIP porte_plume Plugin Arbitrary PHP Execution VulnerabilityPatch nowKEVEPSS 90.05%Sep 22, 2024
- Unknownmemberhero member_hero Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.44%Sep 19, 2024
Sort