Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownParallels Plesk Panel and Small Business Panel ScriptAlias Directive VulnerabilityPatch nowKEVEPSS 31.07%Jun 6, 2013
- Unknownmaxtom atomymaxsite Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.02%Jan 8, 2013
- UnknownSimple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! Remote Code ExecutionPatch nowKEVEPSS 4.84%Aug 31, 2012
- UnknownPHP_php_stream_scandir Function VulnerabilityPatch nowKEVEPSS 10.47%Jun 19, 2012
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.74%Jun 7, 2012
- UnknownPHP PHP Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 19.84%May 21, 2012
- Critical9.8PHP-CGI Query String Parameter VulnerabilityPatch nowKEVEPSS 100.00%May 11, 2012
- UnknownPHP PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 69.27%May 9, 2012
- Unknownxpressengine zeroboard Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.02%Apr 12, 2012
- Unknownparallels parallels_plesk_panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.04%Mar 12, 2012
- Critical9.3The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameterPatch nowKEVEPSS 0.48%Mar 12, 2012
- UnknownphpMyAdmin phpMyAdmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 12.88%Jan 17, 2012
- Unknownphpldapadmin_project phpldapadmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 51.89%Nov 2, 2011
- Unknownfreepbx FreePBX Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 43.90%Oct 18, 2011
- Unknowncreloaded cre_loaded Improper AuthenticationPatch nowKEVEPSS 1.41%Jun 8, 2011
- UnknownFCKEditor Multiple File Extension Handling PHP File Upload VulnerabilityPatch nowKEVEPSS 8.00%Apr 19, 2011
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.81%Feb 21, 2011
- Unknownnetshinesoftware com_netinvoice Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.84%Nov 16, 2010
- Unknowne107 bbcode/php.bb Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 4.87%Aug 19, 2010
- UnknownRed Hat linux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 41.63%Feb 15, 2010
- UnknownSPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 Installation and Backup Unauthorized Activity VulnerabilityPatch nowKEVEPSS 6.59%Aug 6, 2009
- Critical9.8phpMyAdmin Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.56%Mar 26, 2009
- Unknownphpcow phpcow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.69%Nov 25, 2008
- UnknownJoomla! components/com_user/models/reset.php First Enabled User VulnerabilityPatch nowKEVEPSS 9.47%Aug 15, 2008
- Unknowncoppermine coppermine_photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.86%Apr 16, 2008
Sort