Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 40.99%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_save_mega_menu_settings Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.70%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_import_library_template Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.61%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_final_settings_setup Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.61%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_fix_royal_compatibility Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.81%Jan 10, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_activate_required_theme VulnerabilityPatch nowKEVEPSS 0.83%Jan 10, 2023
- Unknownm-FILTER Email Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.71%Jan 6, 2023
- Critical9.8CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jan 5, 2023
- High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 80.14%Jan 4, 2023
- UnknownJeg Elementor Kit Plugin for WordPress MailChimp API Key VulnerabilityPatch nowKEVEPSS 1.63%Jan 3, 2023
- Unknownetoilewebdesign ultimate_faq Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.84%Dec 30, 2022
- Unknownetoilewebdesign ultimate_faq Missing Authentication for Critical FunctionPatch nowKEVEPSS 3.52%Dec 30, 2022
- Unknowntagdiv newspaper Improper Privilege ManagementPatch nowKEVEPSS 9.27%Dec 30, 2022
- Medium6.1php_curl_class_project php_curl_class Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.27%Dec 26, 2022
- UnknownUser Post Gallery WordPress plugin Callback Functions VulnerabilityPatch nowKEVEPSS 42.72%Dec 26, 2022
- Unknownyithemes yith_woocommerce_gift_cards Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 13.51%Dec 22, 2022
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.58%Dec 21, 2022
- UnknownTenda hg9_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.20%Dec 21, 2022
- UnknownLinuxKI Toolset 6.0-1 Remote Code ExecutionPatch nowKEVEPSS 98.75%Dec 21, 2022
- UnknownD-Link dir-619l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.40%Dec 21, 2022
- Unknownzivif pr115-204-p-rs_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.56%Dec 21, 2022
- Unknownsygnoos popup_builder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.23%Dec 19, 2022
- UnknownmacOS Ventura, watchOS, Safari, tvOS, iOS and iPadOS Maliciously Crafted Web Content Code Execution VulnerabilityPatch nowKEVEPSS 0.89%Dec 13, 2022
- UnknowniOS and iPadOS, macOS Ventura, macOS Big Sur, and macOS Monterey App Sensitive Location Read VulnerabilityPatch nowKEVEPSS 0.35%Dec 13, 2022
- UnknowniOS, iPadOS, macOS Ventura, and Safari URL Spoofing VulnerabilityPatch nowKEVEPSS 0.97%Dec 13, 2022