Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.69%Jun 10, 2024
- High7.8Android Kernel Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.70%Jun 10, 2024
- Unknownkyocera net_viewer Insufficiently Protected CredentialsPatch nowKEVEPSS 14.62%Jun 8, 2024
- UnknownARForms - Premium WordPress Form Builder Plugin for WordPress PHP Code Upload VulnerabilityPatch nowKEVEPSS 3.35%Jun 7, 2024
- High7.8Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 0.76%Jun 7, 2024
- Critical9.8PHP-CGI OS Command Injection VulnerabilityPatch nowKEVEPSS 99.99%Jun 7, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 73.30%Jun 6, 2024
- High7.5SolarWinds Serv-U Path Traversal VulnerabilityPatch nowKEVEPSS 99.61%Jun 6, 2024
- Unknownamauri wpmobile.app Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.66%Jun 6, 2024
- Unknowncode4recovery 12_step_meeting_list Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.58%Jun 6, 2024
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Jun 6, 2024
- UnknownLogin/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress import_settings VulnerabilityPatch nowKEVEPSS 1.51%Jun 5, 2024
- Unknowngeneratepress generatepress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Jun 5, 2024
- Critical9.1StellarWP the_events_calendar Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.08%Jun 4, 2024
- Unknownbackupbliss backup_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.05%Jun 3, 2024
- High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityPatch nowKEVEPSS 99.94%May 31, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 99.48%May 31, 2024
- Critical9.8Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 97.48%May 29, 2024
- UnknownWP Statistics Plugin for WordPress Stored Cross-Site ScriptingPatch nowKEVEPSS 67.72%May 29, 2024
- UnknownWP Meta SEO plugin for WordPress Stored Cross-Site ScriptingPatch nowKEVEPSS 0.45%May 29, 2024
- UnknownApple iphone_os Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 14.03%May 29, 2024
- UnknownApple safari Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 53.97%May 29, 2024
- Unknownthemepunch slider_revolution Missing AuthorizationPatch nowKEVEPSS 0.33%May 28, 2024
- UnknownQNAP Operating System Authenticated Network Buffer OverflowPatch nowKEVEPSS 37.52%May 27, 2024
- High8.6Check Point Quantum Security Gateways Information Disclosure VulnerabilityPatch nowKEVEPSS 99.98%May 27, 2024