Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWSO2 User Registration Arbitrary Account CreationPatch nowKEVEPSS 0.66%Feb 2, 2025
- Unknownafterlogic aurora Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.90%Jan 22, 2025
- UnknownUnverified Password ChangePatch nowKEVEPSS 1.44%Jan 18, 2025
- High7.2SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 64.47%Jan 15, 2025
- Critical9.9SimpleHelp Missing Authorization VulnerabilityPatch nowKEVEPSS 66.41%Jan 15, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.35%Jan 14, 2025
- Low3.6shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistic…Check if you run itEPSS 0.43%Dec 26, 2024
- High7.2BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityPatch nowKEVEPSS 13.70%Dec 18, 2024
- UnknownSign In With Google plugin for WordPress authenticate_user Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.81%Dec 12, 2024
- Low2.7Mitel MiCollab Path Traversal VulnerabilityPatch nowKEVEPSS 38.16%Dec 10, 2024
- UnknownLinux Kernel Use After FreePatch nowKEVEPSS 1.89%Dec 6, 2024
- UnknownF-logic DataCube3 /admin/transceiver_schedule.php File Upload VulnerabilityPatch nowKEVEPSS 12.75%Dec 5, 2024
- Unknownsuperwebmailer superwebmailer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Dec 5, 2024
- Unknownwavlink wl-wn531p3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.52%Dec 5, 2024
- UnknownAcmailer and Acmailer DB Survey Function VulnerabilityPatch nowKEVEPSS 7.41%Dec 5, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Admin Account Arbitrary OS Command ExecutionPatch nowKEVEPSS 0.90%Dec 4, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityPatch nowKEVEPSS 94.82%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.86%Nov 18, 2024
- High7.5A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly creat…Check if you run itEPSS 0.49%Nov 17, 2024
- Unknownreally-simple-plugins really_simple_security Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 82.22%Nov 14, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer may become…Check if you run itEPSS 0.25%Nov 5, 2024
- UnknownZyxel ax7501-b0_firmware Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.25%Nov 1, 2024
- UnknownRank Math SEO – AI SEO Tools to Dominate SEO Rankings Plugin for WordPress update_metadata Function VulnerabilityPatch nowKEVEPSS 2.13%Oct 25, 2024
- UnknownPaytium: Mollie payment forms & donations plugin for WordPress paytium_notice_dismiss Function VulnerabilityPatch nowKEVEPSS 0.28%Oct 15, 2024
- UnknownDownload Monitor plugin for WordPress REST-API Routes VulnerabilityPatch nowKEVEPSS 0.47%Oct 15, 2024
Sort