Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncreative-solutions creative_contact_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 91.66%Feb 8, 2020
- Critical9.8EyesOfNetwork Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 91.87%Feb 6, 2020
- Unknownaccessally popupally Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.76%Jan 21, 2020
- Unknownwebfactoryltd wp_database_reset Improper Privilege ManagementPatch nowKEVEPSS 2.46%Jan 16, 2020
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 97.70%Dec 24, 2019
- UnknownMaccms wd Parameter Request VulnerabilityPatch nowKEVEPSS 44.09%Dec 24, 2019
- Unknownwebfactoryltd 301_redirects Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.86%Dec 19, 2019
- Unknownyachtcontrol yachtcontrol Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 58.88%Dec 13, 2019
- Unknownmitsubishielectric smartrtu_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 57.38%Dec 13, 2019
- Unknownsimplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.Check if you run itEPSS 0.74%Nov 6, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.75%Oct 28, 2019
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Sep 24, 2019
- High8.8Nagios XI Remote Code Execution VulnerabilityPatch nowKEVEPSS 77.04%Sep 5, 2019
- Unknownphpopenchat phpopenchat Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.92%Aug 28, 2019
- Unknownnevma adaptive_images Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.73%Jul 19, 2019
- Medium5.3getflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 62.57%Jul 10, 2019
- Unknownphpcms phpcms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 20.77%Apr 4, 2019
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 72.95%Mar 24, 2019
- High8.1Drupal Core Remote Code Execution VulnerabilityPatch nowKEVEPSS 92.02%Feb 21, 2019
- UnknownThinkPHP ThinkPHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Feb 21, 2019
- Unknownnetwork-weathermap .network_weathermap Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.68%Feb 21, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.42%Jan 13, 2019
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.53%Dec 11, 2018
- Critical9.8comsenz duomicms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.26%Oct 9, 2018
- Unknownmodx modx_revolution Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 64.09%Sep 26, 2018
Sort