Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowngwolle_guestbook_project gwolle_guestbook Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 37.03%Jan 22, 2024
- Critical9.8D-Link DIR-859 Router Path Traversal VulnerabilityPatch nowKEVEPSS 82.71%Jan 21, 2024
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 63.37%Jan 21, 2024
- Unknownhytec hwl-2511-ss_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 90.90%Jan 21, 2024
- Unknownpluginus woot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.95%Jan 21, 2024
- Unknowncodeastrology woo_product_table Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 25.94%Jan 21, 2024
- Unknownemerson dixell_xweb-500_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 17.55%Jan 21, 2024
- Unknownopentsdb opentsdb Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 85.33%Jan 21, 2024
- UnknownSecure-file-manager plugin through 2.5 for WordPress Remote Code ExecutionPatch nowKEVEPSS 18.28%Jan 21, 2024
- UnknownWP Lab wp-lister_lite_for_ebay Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Jan 19, 2024
- Unknownmagnussolution magnusbilling Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.25%Jan 19, 2024
- UnknownWebmin Webmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 34.80%Jan 17, 2024
- High7.5Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 57.63%Jan 16, 2024
- High8.8Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityPatch nowKEVEPSS 3.19%Jan 16, 2024
- UnknownMicrosoft psexec Improper Privilege ManagementPatch nowKEVEPSS 0.57%Jan 16, 2024
- Critical9.8Atlassian Confluence Data Center and Server Template Injection VulnerabilityPatch nowKEVEPSS 99.98%Jan 15, 2024
- UnknownInstaWP instawp_connect Incorrect Privilege AssignmentPatch nowKEVEPSS 1.10%Jan 15, 2024
- High8.2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 100.00%Jan 15, 2024
- Unknowntemenos t24 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 7.85%Jan 14, 2024
- UnknownZoho manageengine_opmanager Deserialization of Untrusted DataPatch nowKEVEPSS 51.33%Jan 13, 2024
- UnknownMicro Focus application_performance_management Use of Hard-coded CredentialsPatch nowKEVEPSS 74.45%Jan 13, 2024
- UnknownSchneider Electric net5501_firmware Improper AuthenticationPatch nowKEVEPSS 36.65%Jan 13, 2024
- Unknownopennetadmin opennetadmin Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.51%Jan 13, 2024
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.46%Jan 12, 2024
- High8.8Google Chromium V8 Out-of-Bounds Memory Access VulnerabilityPatch nowKEVEPSS 3.80%Jan 11, 2024