Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownjournyx journyx Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 32.92%Sep 4, 2024
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 63.56%Sep 4, 2024
- Unknownyandex yandex_browser Untrusted Search PathPatch nowKEVEPSS 0.71%Sep 3, 2024
- UnknownHAProxy Endless Loop HTTP/2 VulnerabilityPatch nowKEVEPSS 1.20%Sep 3, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityPatch nowKEVEPSS 93.00%Aug 29, 2024
- UnknownFastAdmin /index/ajax/lang Directory Traversal VulnerabilityPatch nowKEVEPSS 16.88%Aug 29, 2024
- UnknownAVTECH IP Camera Command Injection VulnerabilityPatch nowKEVEPSS 43.34%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Aug 28, 2024
- Unknownsunshinephotocart sunshine_photo_cart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Aug 28, 2024
- Critical10.0HP intelligent_management_center Deserialization of Untrusted DataPatch nowKEVEPSS 0.96%Aug 28, 2024
- UnknownD-Link DIR-825 R1 Devices Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.25%Aug 28, 2024
- Unknownverizon fios_quantum_gateway_g1100_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 29.89%Aug 28, 2024
- UnknownWordPress Name Directory Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.26%Aug 26, 2024
- Unknownposimyth the_plus_addons_for_elementor Missing AuthorizationPatch nowKEVEPSS 0.56%Aug 26, 2024
- Unknowntemplateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.96%Aug 24, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Aug 23, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.90%Aug 23, 2024
- High7.2Versa Director Dangerous File Type Upload VulnerabilityPatch nowKEVEPSS 3.99%Aug 22, 2024
- UnknownLiteLLM Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 34.38%Aug 22, 2024
- UnknownOllama Model Path Remote Code Execution VulnerabilityPatch nowKEVEPSS 89.63%Aug 22, 2024
- Critical9.1SolarWinds Web Help Desk Hardcoded Credential VulnerabilityPatch nowKEVEPSS 93.30%Aug 21, 2024
- Critical9.6Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 21.01%Aug 21, 2024
- High8.8Google Chromium V8 Inappropriate Implementation VulnerabilityPatch nowKEVEPSS 18.53%Aug 21, 2024
Sort