Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 72.95%Mar 24, 2019
- UnknownAbandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress Stored XSSPatch nowKEVEPSS 1.35%Mar 11, 2019
- Unknownasustor adm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 44.33%Feb 21, 2019
- Unknownxiongmaitech mbd6304t Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.30%Feb 20, 2019
- Critical9.8Kaseya VSA SQL Injection VulnerabilityPatch nowKEVEPSS 86.82%Feb 4, 2019
- High7.2Cisco Small Business Routers Improper Input Validation VulnerabilityPatch nowKEVEPSS 95.92%Jan 24, 2019
- Critical9.8Paessler PRTG Network Monitor Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.94%Nov 21, 2018
- Critical9.3vestacp control_panel Embedded Malicious CodePatch nowKEVEPSS 0.44%Sep 25, 2018
- High7.2WordPress wordpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 15.17%Aug 10, 2018
- UnknownASUS rt-ac53_firmware Improper AuthenticationPatch nowKEVEPSS 7.55%Jul 13, 2018
- High7.2Apache CouchDB Improper Input ValidationPatch nowKEVEPSS 12.16%Jul 11, 2018
- High7.2Paessler PRTG Network Monitor OS Command Injection VulnerabilityPatch nowKEVEPSS 87.00%Jul 2, 2018
- High7.2Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%May 16, 2018
- High7.2Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%May 16, 2018
- Critical9.8Kaseya VSA Remote Code Execution VulnerabilityPatch nowKEVEPSS 29.55%Jan 30, 2018
- UnknownMirasvit helpdesk_mx Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.60%Dec 28, 2017
- Unknownaccesspressthemes ultimate-form-builder-lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.80%Oct 23, 2017
- High7.5Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityPatch nowKEVEPSS 7.07%Sep 28, 2017
- UnknownNETGEAR wnr2000v5_firmware Improper Input ValidationPatch nowKEVEPSS 77.43%Sep 13, 2017
- Critical9.8NETGEAR Multiple Devices Buffer Overflow VulnerabilityPatch nowKEVEPSS 45.75%May 26, 2017
- High8.1NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityPatch nowKEVEPSS 89.35%Jan 17, 2017
- UnknownRed Hat JBoss Application Server Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.14%Mar 25, 2016
- Unknownmagento magento Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.74%Jan 22, 2016
- Unknownmagento magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.93%Jan 22, 2016
- Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 55.77%Jan 22, 2016
Sort