Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownstd42 elfinder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 96.73%Nov 22, 2020
- Unknownmagmi_project magmi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 38.46%Nov 22, 2020
- High8.8Drupal core Un-restricted Upload of FilePatch nowKEVEPSS 36.17%Nov 20, 2020
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.55%Nov 19, 2020
- Unknowntemplateinvaders ti_woocommerce_wishlist Missing AuthorizationPatch nowKEVEPSS 1.14%Oct 16, 2020
- Unknownnetwork-weathermap .network_weathermap Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.68%Oct 15, 2020
- Unknownnette application Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 34.42%Oct 12, 2020
- Critical9.8WordPress File Manager Plugin Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.33%Sep 9, 2020
- UnknownCalmar Webmedia Total Donations plugin through 2.0.5 for WordPress migla_ajax_functions.php Security BypassPatch nowKEVEPSS 26.08%Aug 22, 2020
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 87.48%Aug 12, 2020
- Unknownelegantthemes divi Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.45%Aug 4, 2020
- High8.8D-Link DIR-610 Devices Remote Command ExecutionPatch nowKEVEPSS 21.34%Jul 9, 2020
- Unknowncombodo itop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.49%Jul 8, 2020
- UnknownSchneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.92%Jul 4, 2020
- UnknownLaravel Framework 5.7.x Illuminate Deserialization VulnerabilityPatch nowKEVJun 24, 2020
- Critical9.8rConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVJun 4, 2020
- Unknownmtheme-unus_project mtheme-unus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 55.01%Jun 3, 2020
- Unknownwpshopstyling wp_e-commerce_shop_styling Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 24.09%Jun 3, 2020
- Unknownmagmi_project magmi Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.28%May 18, 2020
- Unknownmageewp onetone Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.22%Apr 15, 2020
- UnknownOneTone theme for WordPress includes/theme-functions.php VulnerabilityPatch nowKEVEPSS 2.36%Apr 15, 2020
- Unknownidxbroker impress_for_idx_broker Missing AuthorizationPatch nowKEVEPSS 0.96%Mar 26, 2020
- Critical9.8Unraid Remote Code Execution VulnerabilityPatch nowKEVEPSS 95.84%Mar 16, 2020
- UnknownThemeREX addons Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 8.88%Mar 9, 2020
- High8.8rConfig OS Command Injection VulnerabilityPatch nowKEVEPSS 77.12%Mar 8, 2020
Sort