Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 99.76%Jul 20, 2023
- UnknownRank Math seo Missing AuthorizationPatch nowKEVEPSS 9.11%Jul 19, 2023
- Unknownautomattic woocommerce_payments Improper AuthenticationPatch nowKEVEPSS 87.04%Jul 17, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 99.79%Jul 12, 2023
- High7.8Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespaceCheck if you run itEPSS 1.54%Jul 5, 2023
- Unknownthinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.93%Jul 5, 2023
- UnknownThe Ultimate Member WordPress plugin before 2.6.7 Privilege EscalationPatch nowKEVEPSS 72.31%Jun 29, 2023
- UnknownLearnDash LMS plugin for WordPress Insecure Direct Object References VulnerabilityPatch nowKEVEPSS 2.23%Jun 27, 2023
- Unknownwp-experts protect_wp_admin URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.73%Jun 22, 2023
- Unknownapsystems ecu-r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 76.60%Jun 22, 2023
- UnknownVMware workstation Uncontrolled Search Path ElementPatch nowKEVEPSS 9.03%Jun 22, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.83%Jun 20, 2023
- Critical9.8Microsoft SharePoint Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 99.98%Jun 13, 2023
- High7.5Ignite Realtime Openfire Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%May 26, 2023
- Unknownemby emby.releases Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 1.70%May 25, 2023
- UnknownMStore API plugin for WordPress Authentication Bypass VulnerabilityPatch nowKEVEPSS 3.81%May 25, 2023
- UnknownFatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 "cmuser" Backdoor AccountPatch nowKEVEPSS 5.47%May 5, 2023
- Critical9.1A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.Check if you run itEPSS 0.69%Apr 25, 2023
- Medium6.8A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, inclu…Check if you run itEPSS 0.48%Apr 25, 2023
- High8.7A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents o…Check if you run itEPSS 0.64%Apr 25, 2023
- High8.7A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.Check if you run itEPSS 0.64%Apr 25, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 97.41%Apr 24, 2023
- Medium4.9Strapi Cleartext Storage of Sensitive Information VulnerabilityPatch nowKEVEPSS 3.61%Apr 19, 2023
- Unknowngocloud s2a_wl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.85%Apr 18, 2023
- Low3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger).Check if you run itEPSS 0.43%Apr 14, 2023
Sort