Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1deconf analytics_insights URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.25%Feb 12, 2024
- Unknownmonitorr monitorr Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 49.37%Feb 10, 2024
- UnknownWestern Digital mycloud_nas Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 97.82%Feb 7, 2024
- Unknownwpengine better_search_replace Deserialization of Untrusted DataPatch nowKEVEPSS 68.05%Jan 25, 2024
- Unknownlikeshop likeshop Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.92%Jan 22, 2024
- Unknownnajeebmedia woocommerce_checkout_field_manager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.43%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 9.97%Jan 22, 2024
- Unknowncuppacms cuppacms Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 7.93%Jan 22, 2024
- Unknownonline-shopping-system-advanced_project online-shopping-system-advanced Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 51.77%Jan 22, 2024
- Unknownseopress seopress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Jan 22, 2024
- Unknownvoid aurall_rec_monitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.25%Jan 22, 2024
- Unknownrevive-adserver revive_adserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.98%Jan 22, 2024
- Unknownqcubed qcubed Deserialization of Untrusted DataPatch nowKEVEPSS 4.98%Jan 22, 2024
- Unknownarticatech web_proxy Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 82.37%Jan 22, 2024
- UnknownWestern Digital my_cloud_pr4100_firmware Improper AuthenticationPatch nowKEVEPSS 73.40%Jan 22, 2024
- Unknowngwolle_guestbook_project gwolle_guestbook Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 37.03%Jan 22, 2024
- UnknownSecure-file-manager plugin through 2.5 for WordPress Remote Code ExecutionPatch nowKEVEPSS 18.28%Jan 21, 2024
- Unknownproperfraction profilepress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.74%Jan 5, 2024
- UnknownD-Link central_wifimanager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 44.10%Jan 4, 2024
- Unknownphpcollab phpcollab Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 96.39%Jan 4, 2024
- Unknownarticatech artica_proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.97%Jan 2, 2024
- UnknownVR Calendar WordPress plugin through 2.3.2 Arbitrary PHP Function ExecutiuonPatch nowKEVEPSS 17.56%Jan 1, 2024
- Unknownwebtoprint web_to_print_shop\ Files or Directories Accessible to External PartiesPatch nowKEVEPSS 7.88%Dec 25, 2023
- Unknownincomcms_project incomcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 71.33%Dec 25, 2023
- Unknownkaswara_project kaswara Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 42.14%Dec 24, 2023
Sort