Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- UnknownBeRocket Plugins for WordPress Authorization BypassPatch nowKEVEPSS 0.23%Mar 21, 2023
- High8.8TP-Link Archer AX-21 Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Mar 15, 2023
- UnknownAirspan AirSpot 5410 version 0.3.4.1-4 and under Remote Code ExecutionPatch nowKEVEPSS 54.55%Feb 15, 2023
- Critical9.8Multiple Ruckus Wireless Products CSRF and RCE VulnerabilityPatch nowKEVEPSS 98.07%Feb 13, 2023
- Unknownsunlogin sunflower Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.79%Feb 6, 2023
- Unknowniubenda iubenda-cookie-law-solution Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.47%Feb 2, 2023
- Unknowndcnglobal dcbi-netlog-lab_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 48.71%Feb 1, 2023
- Unknownawesomemotive duplicator Direct Request ('Forced Browsing')Patch nowKEVEPSS 17.72%Feb 1, 2023
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Jan 29, 2023
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.74%Jan 11, 2023
- High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 80.14%Jan 4, 2023
- Unknownzivif pr115-204-p-rs_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.56%Dec 21, 2022
- Critical9.8Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.47%Dec 12, 2022
- Unknownzivif pr115-204-p-rs_firmware Insufficiently Protected CredentialsPatch nowKEVEPSS 15.26%Dec 8, 2022
- Unknowndw megapix_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.81%Dec 6, 2022
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- Unknowndreamsecurity magicline4nx.exe Improper Input ValidationPatch nowKEVEPSS 2.43%Oct 24, 2022
- UnknownJuniper Junos OS Improper Input ValidationPatch nowKEVEPSS 1.30%Oct 18, 2022
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Oct 10, 2022
- High8.8Microsoft Exchange Server Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 99.96%Sep 29, 2022
- High8.8Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityPatch nowKEVEPSS 99.08%Aug 24, 2022
- UnknownBeyondTrust appliance_base_software Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 25.99%Aug 19, 2022
- UnknownEclipse Jetty ConcatServlet VulnerabilityPatch nowKEVEPSS 78.48%Aug 19, 2022
- Unknowngetperfectsurvey perfect_survey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 86.78%Aug 19, 2022
Sort