Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownA-blog CMS Untrusted Data DeserializationPatch nowKEVEPSS 0.48%Mar 28, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 65.00%Mar 27, 2025
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Deserialization of Untrusted DataPatch nowKEVEPSS 0.59%Mar 27, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 78.36%Mar 27, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 28.72%Mar 27, 2025
- Unknownmatrix synapse Improper Input ValidationPatch nowKEVEPSS 1.20%Mar 26, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityPatch nowKEVEPSS 87.94%Mar 25, 2025
- High8.3Google Chromium Mojo Sandbox Escape VulnerabilityPatch nowKEVEPSS 9.24%Mar 25, 2025
- UnknownUser Registration & Membership WordPress Plugin Membership Addon Privilege EscalationPatch nowKEVEPSS 48.80%Mar 25, 2025
- Critical10.0PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).Patch nowKEVEPSS 0.99%Mar 25, 2025
- High7.2Kentico Xperience Path Traversal VulnerabilityPatch nowKEVEPSS 4.02%Mar 24, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 97.17%Mar 24, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 74.06%Mar 24, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationPatch nowKEVEPSS 99.38%Mar 23, 2025
- UnknownHorde imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 31.29%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.96%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.15%Mar 21, 2025
- High8.6reviewdog/action-setup GitHub Action Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 2.48%Mar 19, 2025
- UnknownWhatsApp PDF Content Sandbox BypassPatch nowKEVEPSS 0.26%Mar 19, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.88%Mar 19, 2025
- Unknownrevmakx backup_and_staging_by_wp_time_capsule Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 94.14%Mar 19, 2025
- Unknownvicidial vicidial Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 79.27%Mar 19, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 76.80%Mar 19, 2025
- UnknownLiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.40%Mar 19, 2025