Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWP 2FA Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.41%Apr 16, 2024
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.51%Apr 16, 2024
- UnknownHamid Alinia - idehweb Login With Phone Number Privilege EscalationPatch nowKEVEPSS 0.46%Apr 15, 2024
- Unknowncraftcms Craft CMS Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 94.22%Apr 15, 2024
- UnknownPipeline: Groovy Plugin 2.61 and earlier Sandbox BypassPatch nowKEVEPSS 86.05%Apr 15, 2024
- Unknowncomodo unified_threat_management_firewall Improper AuthenticationPatch nowKEVEPSS 83.91%Apr 15, 2024
- Unknownjpcert logontracer Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 74.92%Apr 15, 2024
- UnknownDell emc_idrac7 Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 90.09%Apr 15, 2024
- UnknownApache Struts Improper Input ValidationPatch nowKEVEPSS 87.12%Apr 15, 2024
- UnknownFortinet fortiwlm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.32%Apr 14, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 12, 2024
- UnknownInstaWP Connect 1-click WP Staging & Migration plugin for WordPress Arbitrary File UploadPatch nowKEVEPSS 5.75%Apr 12, 2024
- UnknownN-able N-central Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.95%Apr 11, 2024
- Unknownawesomemotive duplicator Files or Directories Accessible to External PartiesPatch nowKEVEPSS 30.89%Apr 11, 2024
- Unknowndocumentlocator document_locator Improper AuthenticationPatch nowKEVEPSS 60.78%Apr 11, 2024
- UnknownThinkPHP ThinkPHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 30.24%Apr 11, 2024
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 81.83%Apr 11, 2024
- UnknownForminator Contact Form, Payment Form & Custom Form Builder plugin for WordPress Stored Cross Site Scripting VulnerabilityPatch nowKEVEPSS 0.36%Apr 9, 2024
- High8.8Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilityPatch nowKEVEPSS 45.15%Apr 9, 2024
- UnknownProxy Driver Spoofing VulnerabilityPatch nowKEVEPSS 4.85%Apr 9, 2024
- UnknownWordPress 5 Stars Rating Funnel Plugin Arbitrary Content DeletionPatch nowKEVEPSS 0.58%Apr 8, 2024
- Unknownchiyu-tech bf-430_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 79.61%Apr 8, 2024
- UnknownIBM bigfix_platform Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 22.55%Apr 8, 2024
- UnknownIgnite Realtime Openfire Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.94%Apr 8, 2024
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.10%Apr 6, 2024
Sort