Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownF-Logic DataCube3 req_id SQL InjectionPatch nowKEVEPSS 19.27%Jul 3, 2024
- UnknownArtifex Ghostscript SAFER Sandbox BypassPatch nowKEVEPSS 27.97%Jul 3, 2024
- Medium5.3Twilio Authy Information Disclosure VulnerabilityPatch nowKEVEPSS 1.67%Jul 2, 2024
- High7.5FlowiseAI Flowise Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.78%Jul 1, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 1, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Patch nowKEVEPSS 99.51%Jul 1, 2024
- Unknownpixelite events_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.31%Jul 1, 2024
- Unknownxtendify woffice Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Jul 1, 2024
- Medium6.7Cisco NX-OS Command Injection VulnerabilityPatch nowKEVEPSS 4.31%Jul 1, 2024
- UnknownZoho ManageEngine ADManager Plus Authenticated VulnerabilityPatch nowKEVEPSS 11.13%Jul 1, 2024
- UnknownQuest kace_systems_management Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.55%Jun 29, 2024
- Unknownmailster mailster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Jun 28, 2024
- Unknownattribute_wizard_project attribute_wizard Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 12.33%Jun 28, 2024
- High7.5lollms lollms_web_ui Absolute Path TraversalPatch nowKEVEPSS 1.94%Jun 27, 2024
- Unknownemilia progress_planner Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.26%Jun 27, 2024
- UnknownWP Lab wp-lister_lite_for_amazon Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownwpextended wp_extended Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownnetis-systems mw5360_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 70.78%Jun 27, 2024
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 34.52%Jun 26, 2024
- Unknowncoffee_shop_pos_system_project coffee_shop_pos_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.64%Jun 26, 2024
- UnknownCrestron hd-md4x2-4k-e_firmware Improper AuthenticationPatch nowKEVEPSS 75.16%Jun 26, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024
- UnknownProgress MOVEit Transfer SFTP Module Authentication BypassPatch nowKEVEPSS 81.47%Jun 25, 2024
- UnknownPromokit.eu PrestaShop pkfacebook SQL InjectionPatch nowKEVEPSS 10.09%Jun 24, 2024
Sort