Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could execute unauthorised commands within the system.Check if you run itEPSS 0.66%Apr 15, 2025
- Medium6.5Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password (aka index.php?/home/forgot-password) vis_username parameter.Check if you run itEPSS 0.28%Apr 15, 2025
- Critical9.8A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter.Check if you run itEPSS 0.65%Apr 15, 2025
- Medium6.5SQL injection vulnerability found in Enricozab CMS v.1.0 allows a remote attacker to execute arbitrary code via /hdo/hdo-view-case.php.Check if you run itEPSS 0.48%Apr 15, 2025
- UnknownInstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.60%Apr 11, 2025
- Unknowninfornweb news_\&_blog_designer_pack Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.84%Apr 1, 2025
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Deserialization of Untrusted DataPatch nowKEVEPSS 0.59%Mar 27, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 78.36%Mar 27, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 32.40%Mar 27, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.96%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.15%Mar 21, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.88%Mar 19, 2025
- Unknownrevmakx backup_and_staging_by_wp_time_capsule Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 94.14%Mar 19, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 76.80%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.54%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.69%Mar 19, 2025
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.38%Mar 10, 2025
- Unknownusualtool usualtoolcms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.62%Feb 18, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- Unknownafterlogic aurora Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.90%Jan 22, 2025
- Unknownrepetier-server repetier-server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.57%Jan 13, 2025
- UnknownAltenergy Power Control Software SQL InjectionPatch nowKEVEPSS 3.67%Dec 24, 2024
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
Sort