Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTOTOLINK EX1800T apcliEncrypType VulnerabilityPatch nowKEVEPSS 3.82%Aug 13, 2024
- High7.2Mitel SIP Phones Argument Injection VulnerabilityPatch nowKEVEPSS 41.65%Aug 12, 2024
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 24.61%Aug 12, 2024
- High7.2TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 1.79%Aug 12, 2024
- Critical9.8Samsung MagicINFO 9 Server Path Traversal VulnerabilityPatch nowKEVEPSS 91.94%Aug 12, 2024
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.44%Aug 12, 2024
- UnknownLiquid Web GiveWP Object Injection VulnerabilityPatch nowKEVEPSS 0.56%Aug 9, 2024
- UnknownTOTOLINK a3700r_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 65.41%Aug 9, 2024
- UnknownElementsKit Elementor addons plugin for WordPress ekit_widgetarea_content Function VulnerabilityPatch nowKEVEPSS 0.40%Aug 8, 2024
- UnknownWoffice Theme Privilege EscalationPatch nowKEVEPSS 0.62%Aug 7, 2024
- UnknownTOTOlink A3700R setTracerouteCfg VulnerabilityPatch nowKEVEPSS 1.67%Aug 7, 2024
- UnknownMicrosoft windows_xp Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 21.97%Aug 7, 2024
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 100.00%Aug 6, 2024
- UnknownCacti cmd_realtime.php Command Injection VulnerabilityPatch nowKEVEPSS 98.49%Aug 6, 2024
- UnknownD-Link dar-7000_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.51%Aug 6, 2024
- UnknownJEECG jimureport Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 11.59%Aug 6, 2024
- Unknownapollotheme ap_pagebuilder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.39%Aug 6, 2024
- Critical9.3RoundCube Webmail Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 82.88%Aug 5, 2024
- Critical9.8Apache OFBiz Incorrect Authorization VulnerabilityPatch nowKEVEPSS 99.43%Aug 5, 2024
- Unknownawesomemotive easy_digital_downloads Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.59%Aug 1, 2024
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Aug 1, 2024
- Unknownkofimokome message_filter_for_contact_form_7 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Aug 1, 2024
- Unknownkunalnagar custom_404_pro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Aug 1, 2024
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 0.67%Jul 29, 2024
- Unknownkeepass keepass Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 4.40%Jul 25, 2024