Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownthedigitalcraft atomcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.15%Jun 8, 2025
- Unknowndwbooster calendar_event_multi_view Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.54%Jun 8, 2025
- Unknown74cms 74cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.10%Jun 8, 2025
- Unknownmetinfo metinfo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.44%Jun 8, 2025
- Unknownganglia ganglia-web Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.61%Jun 7, 2025
- Unknowntecrail responsive_filemanager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.63%Jun 7, 2025
- Unknownshirne_cms_project shirne_cms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.54%Jun 7, 2025
- Unknownweiphp weiphp Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.75%Jun 7, 2025
- Unknownteclib-edition gestionnaire_libre_de_parc_informatique Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.37%Jun 7, 2025
- Unknowndompdf dompdf Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 39.37%Jun 7, 2025
- Unknownappserv_open_project appserv Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.23%Jun 7, 2025
- Unknownsquirrelmail squirrelmail Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 25.75%Jun 7, 2025
- High8.1Path Traversal: '.../...//'Patch nowKEVEPSS 0.65%Jun 3, 2025
- Unknowntrueranker true_ranker Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 77.94%Jun 3, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.97%Jun 1, 2025
- Critical9.3Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 71.44%May 28, 2025
- Unknowniptanus wordpress_file_upload Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 93.34%May 27, 2025
- Unknownroxyfileman roxy_fileman Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 73.06%May 27, 2025
- Unknownaviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 27, 2025
- Critical9.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 57.30%May 26, 2025
- Critical10.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 75.64%May 26, 2025
- High8.1scripteo ads_pro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.82%May 23, 2025
- High8.1Blog Designer PRO for WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 0.58%May 21, 2025
- UnknownGibbonEdu Gibbon 'img parameter' Unauthenticated Remote Code ExecutionPatch nowKEVEPSS 63.11%May 19, 2025
- Critical10.0invisioncommunity invisioncommunity Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 84.32%May 16, 2025
Sort