Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownindionetworks unibox_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.95%Jul 21, 2025
- UnknownTerraMaster TerraMaster OS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 16.66%Jul 21, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 2.15%Jul 18, 2025
- Unknownhorizontcms_project horizontcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 18.46%Jul 13, 2025
- Critical9.8simplefilelist simple_file_list Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 43.52%Jul 12, 2025
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.51%Jul 1, 2025
- Unknownlive555 streaming_media Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.85%Jul 1, 2025
- UnknownWeaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.88%Jun 26, 2025
- Unknownweiphp weiphp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.20%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.85%Jun 26, 2025
- Critical9.8os4ed opensis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.95%Jun 24, 2025
- Medium5.1geoffrowland jmol Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 23, 2025
- High8.7geoffrowland jmol Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.06%Jun 23, 2025
- Unknowndedecms dedecms Path Traversal: '..\filedir'Patch nowKEVEPSS 2.41%Jun 23, 2025
- Medium6.9fabian school_fees_payment_system Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.00%Jun 21, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 52.47%Jun 20, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.79%Jun 20, 2025
- Unknownaviatrix controller Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Jun 20, 2025
- Critical9.3SugarCRM sugarcrm Deserialization of Untrusted DataPatch nowKEVEPSS 4.96%Jun 20, 2025
- High8.1CodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.03%Jun 17, 2025
- UnknownLaravel Laravel Framework Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 44.76%Jun 8, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.47%Jun 8, 2025
- Unknowncombodo itop Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.75%Jun 8, 2025
- Unknownleotheme leocustomajax Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.85%Jun 8, 2025
- Unknownonline_fire_reporting_system_project online_fire_reporting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.78%Jun 8, 2025
Sort