Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 76.90%Oct 18, 2023
- Unknownroyal-elementor-addons royal_elementor_addons Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 86.35%Oct 13, 2023
- UnknownSangfor next-gen_application_firewall Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 38.95%Oct 10, 2023
- UnknownOpenHook plugin for WordPress 'php' shortcode Remote Code Execution VulnerabilityPatch nowKEVEPSS 1.71%Sep 29, 2023
- Medium6.1Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 63.66%Sep 21, 2023
- UnknownSuper Store Finder plugin for WordPress sendMail.php Insufficient Restrictions VulnerabilityPatch nowKEVEPSS 0.64%Sep 18, 2023
- UnknownAllow PHP in Posts and Pages plugin for WordPress Remote Code ExecutionPatch nowKEVEPSS 0.89%Sep 15, 2023
- Critical9.8Cacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Sep 5, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.12%Aug 29, 2023
- Medium5.3Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 83.45%Aug 17, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 93.47%Aug 17, 2023
- Critical9.8Juniper Junos OS EX Series and SRX Series PHP External Variable Modification VulnerabilityPatch nowKEVEPSS 95.07%Aug 17, 2023
- Medium5.3Juniper Junos OS EX Series PHP External Variable Modification VulnerabilityPatch nowKEVEPSS 89.96%Aug 17, 2023
- UnknownWordPress requests Deserialization of Untrusted DataPatch nowKEVEPSS 2.14%Aug 14, 2023
- Unknowncontec solarview_compact Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 99.29%Jul 5, 2023
- Unknowncontec solarview_compact Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.58%Jul 5, 2023
- Unknowncontec sv-cpt-mc310_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.43%Jul 5, 2023
- Unknownthinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.93%Jul 5, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.57%Jun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.55%Jun 1, 2023
- Critical9.8e-office e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 32.90%May 4, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- Medium5.4A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticated users to injec…Open the advisoryFeb 22, 2023
- Unknowncdatatec c-data_web_management_system Improper NeutralizationPatch nowKEVEPSS 43.93%Feb 15, 2023
- UnknownPHP PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 96.11%Feb 14, 2023
Sort