Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownthedigitalcraft atomcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.15%Jun 8, 2025
- Unknowngwyn\'s_imagemap_selector_project gwyn\'s_imagemap_selector Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.18%Jun 8, 2025
- UnknownTenda g1_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.19%Jun 8, 2025
- Unknowndwbooster calendar_event_multi_view Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.54%Jun 8, 2025
- Unknownzeroshell zeroshell Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.56%Jun 8, 2025
- Unknown74cms 74cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.10%Jun 8, 2025
- UnknownCisco Unified IP Conference Station 7937G Crafted Packets Remote Denial of ServicePatch nowKEVEPSS 79.77%Jun 8, 2025
- Unknownjnoj jiangnan_online_judge Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 11.30%Jun 8, 2025
- Unknownmetinfo metinfo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.44%Jun 8, 2025
- UnknownSAP NetWeaver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 41.45%Jun 8, 2025
- Unknownzedna_ebook_download_project zedna_ebook_download Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 11.66%Jun 8, 2025
- Unknownfoxcms foxcms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 46.58%Jun 7, 2025
- UnknownKentico Xperience CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 60.59%Jun 7, 2025
- Unknownganglia ganglia-web Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.61%Jun 7, 2025
- UnknownSonatype nexus_repository_manager Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.65%Jun 7, 2025
- UnknownSitecore Experience Platform , Manager, and Commerce Unauthenticated Arbitrary File ReadPatch nowKEVEPSS 46.77%Jun 7, 2025
- High7.3Yeti Server Side Template Injection VulnerabilityPatch nowKEVEPSS 3.92%Jun 7, 2025
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 89.33%Jun 7, 2025
- Unknownjhpyle docassemble Use of Incorrectly-Resolved Name or ReferencePatch nowKEVEPSS 69.49%Jun 7, 2025
- UnknownCisco Smart Licensing Utility Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 51.90%Jun 7, 2025
- Unknownhrp2000 e-hr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.74%Jun 7, 2025
- Unknownwwbn avideo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.27%Jun 7, 2025
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 33.98%Jun 7, 2025
- UnknownXWiki xwiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.19%Jun 7, 2025
- UnknownH3C magic_r300-2100m_firmware Out-of-bounds WritePatch nowKEVEPSS 4.35%Jun 7, 2025