Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmontala resourcespace Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 77.89%May 31, 2022
- Unknownkramerav viaware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 54.39%May 26, 2022
- Unknownthedaylightstudio Fuel CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 82.94%May 26, 2022
- Unknownweblizar school_management Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 64.08%May 20, 2022
- UnknownPortable phpMyAdmin Plugin before 1.3.1 for WordPress Authentication BypassPatch nowKEVEPSS 23.75%May 11, 2022
- Unknownelementor Website Builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 92.66%Apr 13, 2022
- High7.5TerraMaster OS Remote Command Execution VulnerabilityPatch nowKEVEPSS 83.17%Apr 11, 2022
- Critical9.8dompdf_project dompdf Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 82.85%Apr 3, 2022
- UnknownNETGEAR readynas_surveillance Improper Input ValidationPatch nowKEVEPSS 94.61%Apr 1, 2022
- Unknownatt communication_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.06%Feb 20, 2022
- UnknownWordPress wordpress Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 26.70%Jan 26, 2022
- Unknowncaddy_project caddy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.03%Jan 26, 2022
- Unknownopensuse leap Missing AuthorizationPatch nowKEVEPSS 14.95%Jan 26, 2022
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.20%Jan 26, 2022
- Critical9.8NUUO NVRmini2 Devices Missing Authentication VulnerabilityPatch nowKEVEPSS 48.50%Jan 14, 2022
- Medium5.3Zabbix Frontend Improper Access Control VulnerabilityPatch nowKEVEPSS 95.26%Jan 13, 2022
- Unknowncodemiq wordpress_email_template_designer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 66.41%Jan 13, 2022
- Unknownsabberworm php_css_parser Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 49.80%Jan 12, 2022
- UnknownIBM tealeaf_cx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.07%Jan 12, 2022
- UnknownIBM tealeaf_cx Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 26.92%Jan 12, 2022
- Unknownraspap raspap Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 17.45%Dec 21, 2021
- Unknownamentotech workreap Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 60.11%Dec 21, 2021
- Unknownautomattic wp_super_cache Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 27.67%Dec 9, 2021
- Unknownaccesspressthemes access_demo_importer Improper AuthorizationPatch nowKEVEPSS 1.71%Nov 28, 2021
- Unknownwpwax directorist Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.84%Nov 16, 2021
Sort