Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownjsmol2wp_project jsmol2wp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.19%Sep 19, 2024
- Unknowndedecms dedecms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.19%Sep 19, 2024
- Unknownimport_legacy_media_project import_legacy_media Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.98%Sep 19, 2024
- Unknownbueltge adminimize Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 10.91%Sep 19, 2024
- Unknowndirk_bartley nweb2fax Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 14.04%Sep 19, 2024
- Unknownbitrix24 bitrix_site_manager URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.57%Sep 19, 2024
- Unknownsquirrelmail address_add_plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.44%Sep 19, 2024
- UnknownInvision Board phpinfo.php Information Disclosure VulnerabilityPatch nowKEVEPSS 2.27%Sep 19, 2024
- UnknownD-Link dar-8000-10_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.69%Sep 18, 2024
- Unknowntongda2000 tongda_office_anywhere Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.30%Sep 18, 2024
- Unknownopenrapid rapidcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 25.24%Sep 18, 2024
- Unknownrosariosis rosariosis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 50.64%Sep 18, 2024
- Unknownsynology calendar Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.25%Sep 18, 2024
- Unknownraisecom msg2300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 93.40%Sep 12, 2024
- Unknownvoipmonitor voipmonitor Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 36.63%Sep 6, 2024
- UnknownCacti cmd_realtime.php Command Injection VulnerabilityPatch nowKEVEPSS 98.83%Aug 6, 2024
- UnknownD-Link dar-7000_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.51%Aug 6, 2024
- Critical9.3RoundCube Webmail Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 82.88%Aug 5, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.62%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.66%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.06%Jul 25, 2024
- UnknownTerramaster index.php app/del VulnerabilityPatch nowKEVEPSS 16.09%Jul 25, 2024
- Unknownipeak ipeakcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.57%Jul 25, 2024
- UnknownThinkPHP '_filename' in index.php Remote Code ExecutionPatch nowKEVEPSS 2.02%Jul 15, 2024
- Unknownavecnous event_post Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.52%Jul 11, 2024
Sort