Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache ActiveMQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 55.42%Dec 5, 2023
- UnknownApache Tika versions 1.7 to 1.17 Command InjectionPatch nowKEVEPSS 93.55%Dec 5, 2023
- High7.5wpfastestcache wp_fastest_cache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 73.71%Dec 4, 2023
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 0.67%Dec 4, 2023
- UnknownD-Link d-view_8 Use of Hard-coded CredentialsPatch nowKEVEPSS 69.56%Dec 4, 2023
- UnknownMedia Library Assistant plugin for WordPress Local File Inclusion and Remote Code ExecutionPatch nowKEVEPSS 85.59%Dec 4, 2023
- Unknownviessmann vitogate_300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 15.25%Dec 4, 2023
- Unknownfilemage filemage Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 17.92%Dec 4, 2023
- UnknownProgress MOVEit Transfer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 95.18%Dec 4, 2023
- Unknownlightdash lightdash Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 6.34%Dec 4, 2023
- Unknownghost ghost Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 39.08%Dec 4, 2023
- UnknownFSMLabs TimeKeeper Code ExecutionPatch nowKEVEPSS 46.30%Dec 4, 2023
- Unknownrudderstack rudder-server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 85.82%Dec 4, 2023
- Unknownapsystems energy_communication_unit_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.75%Dec 4, 2023
- Unknownappwrite appwrite Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 36.42%Dec 4, 2023
- Unknownlexmark cxtpc_firmware Improper Input ValidationPatch nowKEVEPSS 37.84%Dec 4, 2023
- Unknownmetersphere metersphere Missing AuthorizationPatch nowKEVEPSS 51.61%Dec 4, 2023
- UnknownvBulletin vBulletin Deserialization of Untrusted DataPatch nowKEVEPSS 23.93%Dec 4, 2023
- Unknownsandhillsdev easy_digital_downloads Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.17%Dec 4, 2023
- Unknownsecurepoint unified_threat_management Incorrect AuthorizationPatch nowKEVEPSS 3.92%Dec 4, 2023
- Unknownfit2cloud kubepi Missing AuthorizationPatch nowKEVEPSS 3.57%Dec 4, 2023
- Unknownwago compact_controller_100_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 81.91%Dec 4, 2023
- Unknownthedigitalcraft atomcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 53.84%Dec 3, 2023
- Unknownnarnoo_distributor_project narnoo_distributor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 47.83%Dec 3, 2023
- UnknownApache tapestry Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 93.56%Dec 3, 2023