Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownchamilo chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 16.18%Dec 2, 2023
- UnknownFatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Remote Privilege EscalationPatch nowKEVEPSS 1.66%Dec 2, 2023
- Unknownsimplefilelist simple-file-list Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 7.07%Dec 2, 2023
- UnknownIdeaBox Creations PowerPack Pro for Elementor Cross Site Scripting (XSS)Patch nowKEVEPSS 0.42%Dec 1, 2023
- UnknownRuijie RG-EW1200G 1.0(1)B1P5 Access Control VulnerabilityPatch nowKEVEPSS 49.23%Dec 1, 2023
- Unknownlfprojects mlflow Path Traversal: '\..\filename'Patch nowKEVEPSS 69.68%Dec 1, 2023
- Unknownalibaba nacos Authentication Bypass by SpoofingPatch nowKEVEPSS 83.48%Dec 1, 2023
- Unknownarticatech web_proxy Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 93.97%Dec 1, 2023
- High7.5gopiplus email_posts_to_subscribers Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.67%Nov 30, 2023
- High8.8Apple Multiple Products WebKit Memory Corruption VulnerabilityPatch nowKEVEPSS 9.29%Nov 30, 2023
- Medium6.5Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 17.82%Nov 30, 2023
- Unknownhome-assistant home-assistant Improper AuthenticationPatch nowKEVEPSS 72.17%Nov 30, 2023
- Unknownspeakout\!_email_petitions_project speakout\!_email_petitions Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.79%Nov 30, 2023
- Unknownpresspage bestbooks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.13%Nov 30, 2023
- Unknownwp-video-gallery-free_project wp-video-gallery-free Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.13%Nov 30, 2023
- Unknownusersultra users_ultra Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.33%Nov 30, 2023
- UnknownQuantumCloud infographic_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.88%Nov 30, 2023
- Unknownwptaskforce wpcargo_track_\&_trace Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 56.15%Nov 30, 2023
- UnknownSAP scimono Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 10.12%Nov 30, 2023
- UnknownCitrix ShareFile Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 27.15%Nov 30, 2023
- Unknowndragonfly_project dragonfly Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 72.14%Nov 29, 2023
- Unknownbuddypress buddypress Incorrect AuthorizationPatch nowKEVEPSS 13.52%Nov 29, 2023
- Unknownlucee lucee_server Missing AuthorizationPatch nowKEVEPSS 89.19%Nov 29, 2023
- Unknowninfluxdata influxdb Improper AuthenticationPatch nowKEVEPSS 30.92%Nov 29, 2023
- Critical9.8Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityPatch nowKEVEPSS 2.09%Nov 28, 2023