Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSamsung Mobile Processor and Wearable Processor Exynos m2m Scaler Driver VulnerabilityPatch nowKEVEPSS 1.02%Oct 7, 2024
- UnknownASUS Router Authentication Bypass VulnerabilityPatch nowKEVEPSS 43.46%Oct 4, 2024
- UnknownEcho RSS Feed Post Generator plugin for WordPress echo_check_post_header_sent Function VulnerabilityPatch nowKEVEPSS 0.62%Oct 1, 2024
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilityPatch nowKEVEPSS 99.91%Oct 1, 2024
- UnknownSonicWall scrutinizer Improper AuthenticationPatch nowKEVEPSS 44.46%Oct 1, 2024
- UnknownFlowiseAI Flowise Improper AuthenticationPatch nowKEVEPSS 45.05%Sep 29, 2024
- Critical9.3ScienceLogic SL1 Unspecified VulnerabilityPatch nowKEVEPSS 3.83%Sep 28, 2024
- UnknownElementor & Gutenberg Template Library: 5000+ Free & Pro Ready Templates & Cloud! plugin for WordPress Improper Access Control VulnerabilityPatch nowKEVEPSS 1.74%Sep 27, 2024
- UnknownCups-browsed INADDR_ANY IPP Request VulnerabilityPatch nowKEVEPSS 50.60%Sep 27, 2024
- UnknownNetentsec NS-ASG Application Security Gateway /protocol/index.php SQL Injection VulnerabilityPatch nowKEVEPSS 17.62%Sep 26, 2024
- UnknownGradio save_url_to_cache Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 37.11%Sep 25, 2024
- UnknownSPIP porte_plume Plugin Arbitrary PHP Execution VulnerabilityPatch nowKEVEPSS 90.05%Sep 22, 2024
- Critical9.1Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityPatch nowKEVEPSS 98.61%Sep 19, 2024
- UnknownTenda AC18 V15.03.05.05 Firmware formexeCommand Function Command InjectionPatch nowKEVEPSS 1.90%Sep 19, 2024
- UnknownZTE mf833u1_firmware Improper Input ValidationPatch nowKEVEPSS 0.34%Sep 19, 2024
- Unknownmemberhero member_hero Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.44%Sep 19, 2024
- Unknowncozmoslabs profile_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.70%Sep 19, 2024
- Unknowncyberoamworks netgenie_c0101b1-20141120-ng11vo_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.66%Sep 19, 2024
- Unknownmaianscriptworld maian_cart Missing AuthorizationPatch nowKEVEPSS 66.43%Sep 19, 2024
- Unknownstd42 elfinder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 18.93%Sep 19, 2024
- Unknownadvantech r-seenet Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 63.41%Sep 19, 2024
- Unknowncraftcms Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 72.82%Sep 19, 2024
- UnknownAtlassian subversion_application_lifecycle_management Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.20%Sep 19, 2024
- Unknownicewarp mail_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.34%Sep 19, 2024
- Unknown74cms 74cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.94%Sep 19, 2024