Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownpayplus payplus_payment_gateway Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.13%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_ptask_verbose' SQL Injection VulnerabilityPatch nowKEVEPSS 5.41%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_ptask_lean' SQL Injection VulnerabilityPatch nowKEVEPSS 4.55%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_contract_result' SQL Injection VulnerabilityPatch nowKEVEPSS 5.41%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise 'query_utask_verbose' SQL Injection VulnerabilityPatch nowKEVEPSS 5.41%Jan 22, 2025
- UnknownCyberPower PowerPanel Enterprise PDNU REST API Unauthenticated VulnerabilityPatch nowKEVEPSS 6.77%Jan 22, 2025
- Unknownafterlogic aurora Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.90%Jan 22, 2025
- Unknownlansweeper lansweeper Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.31%Jan 22, 2025
- Unknowngit-commit-info_project git-commit-info Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.64%Jan 21, 2025
- Unknownpodlove podlove_podcast_publisher Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.88%Jan 21, 2025
- UnknownUnverified Password ChangePatch nowKEVEPSS 1.44%Jan 18, 2025
- High8.1Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 21.78%Jan 17, 2025
- High7.2SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 64.66%Jan 15, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 96.58%Jan 15, 2025
- Critical9.9SimpleHelp Missing Authorization VulnerabilityPatch nowKEVEPSS 66.60%Jan 15, 2025
- Unknownnexxtsolutions amp300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.35%Jan 15, 2025
- UnknownGitLab GitLab Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.59%Jan 15, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 90.08%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 91.25%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Jan 14, 2025
- High7.8Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityPatch nowKEVEPSS 1.39%Jan 14, 2025
- High7.8Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free VulnerabilityPatch nowKEVEPSS 1.56%Jan 14, 2025
- High7.8Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 9.99%Jan 14, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.15%Jan 14, 2025
- Unknownrepetier-server repetier-server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.57%Jan 13, 2025