Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 68.86%Feb 3, 2023
- Unknowngivewp givewp Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.88%Feb 2, 2023
- Unknownawesomemotive duplicator Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 60.09%Feb 1, 2023
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Jan 29, 2023
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.55%Jan 24, 2023
- High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 80.14%Jan 4, 2023
- Unknownetoilewebdesign ultimate_faq Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.84%Dec 30, 2022
- Unknownetoilewebdesign ultimate_faq Missing Authentication for Critical FunctionPatch nowKEVEPSS 3.52%Dec 30, 2022
- Medium6.1php_curl_class_project php_curl_class Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.27%Dec 26, 2022
- Unknownflir flir_ax8_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 99.61%Dec 6, 2022
- UnknownphpMyAdmin phpMyAdmin Improper AuthenticationPatch nowKEVEPSS 98.35%Dec 6, 2022
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- UnknownStylemixThemes Motors - Car Dealer & Classified Ads Plugin (WordPress) Insufficient Verification of Data AuthenticityPatch nowKEVEPSS 1.15%Dec 5, 2022
- Unknownmailpoet mailpoet_newsletters Improper AuthenticationPatch nowKEVEPSS 60.66%Dec 5, 2022
- UnknownBrandExponents tatsu Missing Authentication for Critical FunctionPatch nowKEVEPSS 83.23%Nov 18, 2022
- UnknownMuffingroup Betheme Deserialization of Untrusted DataPatch nowKEVEPSS 0.68%Nov 17, 2022
- Unknownvtiger vtiger_crm Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.84%Sep 28, 2022
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.51%Sep 19, 2022
- Unknownnajeebmedia frontend_file_manager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.64%Sep 7, 2022
- UnknownWordPress wordpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 64.53%Aug 19, 2022
- Unknownprestashop prestashop Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.72%Jul 22, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.06%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.31%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
Sort