Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 34.52%Jun 26, 2024
- Unknowncoffee_shop_pos_system_project coffee_shop_pos_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.64%Jun 26, 2024
- UnknownCrestron hd-md4x2-4k-e_firmware Improper AuthenticationPatch nowKEVEPSS 75.16%Jun 26, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024
- UnknownProgress MOVEit Transfer SFTP Module Authentication BypassPatch nowKEVEPSS 81.47%Jun 25, 2024
- UnknownPromokit.eu PrestaShop pkfacebook SQL InjectionPatch nowKEVEPSS 10.09%Jun 24, 2024
- UnknownZyxel NAS setCookie Crafted HTTP POST VulnerabilityPatch nowKEVEPSS 86.09%Jun 24, 2024
- Unknownpatton smartnode_sn200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.51%Jun 22, 2024
- Unknownjoommasters jms_blog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 58.74%Jun 22, 2024
- UnknownInstaWP instawp_connect Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.53%Jun 21, 2024
- Medium6.5bplugins html5_video_player Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.62%Jun 20, 2024
- Unknownndkdesign ndk_steppingpack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 49.89%Jun 19, 2024
- Unknownwbce wbce_cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.15%Jun 19, 2024
- Unknownunimo udr-ja1004_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.70%Jun 19, 2024
- Unknownnsfocusglobal secgate3600_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 8.08%Jun 18, 2024
- Critical9.8Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 22.38%Jun 17, 2024
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 10.07%Jun 16, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityPatch nowKEVEPSS 99.99%Jun 13, 2024
- Unknownethyca fides Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 1.10%Jun 13, 2024
- UnknownFortinet FortiOS and FortiProxy Backup File Weak Key VulnerabilityPatch nowKEVEPSS 3.47%Jun 13, 2024
- UnknownInstaWP Connect - 1-click WP Staging & Migration plugin for WordPress REST API VulnerabilityPatch nowKEVEPSS 4.16%Jun 12, 2024
- High7.8Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 25.22%Jun 11, 2024
- High7.0Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityPatch nowKEVEPSS 68.20%Jun 11, 2024
- High7.8Android Pixel Privilege Escalation VulnerabilityPatch nowKEVEPSS 2.99%Jun 11, 2024
- Critical9.8salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.69%Jun 10, 2024