Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWicked Folders plugin for WordPress ajax_delete_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_edit_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_clone_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- Unknownwickedplugins wicked_folders Missing AuthorizationPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_move_object function Authorization BypassPatch nowKEVEPSS 0.60%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_save_state Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- High7.5In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.Open the advisoryFeb 3, 2023
- UnknownJupiter Theme and JupiterX Core Plugin jupiterx_core_cp_uninstall_template VulnerabilityPatch nowKEVEPSS 1.55%Feb 3, 2023
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 68.86%Feb 3, 2023
- Unknowngivewp givewp Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.88%Feb 2, 2023
- Unknownawesomemotive duplicator Direct Request ('Forced Browsing')Patch nowKEVEPSS 17.72%Feb 1, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.75%Jan 18, 2023
- Unknowncozmoslabs profile_builder Improper AuthenticationPatch nowKEVEPSS 7.63%Jan 11, 2023
- High8.8PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS…Check if you run itEPSS 6.53%Dec 25, 2022
- Critical9.8Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass VulnerabilityPatch nowKEVEPSS 6.86%Dec 13, 2022
- Unknowndw megapix_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.81%Dec 6, 2022
- UnknownphpMyAdmin phpMyAdmin Improper AuthenticationPatch nowKEVEPSS 98.35%Dec 6, 2022
- Unknownuserproplugin userpro Improper AuthenticationPatch nowKEVEPSS 27.37%Dec 5, 2022
- Unknownmailpoet mailpoet_newsletters Improper AuthenticationPatch nowKEVEPSS 60.66%Dec 5, 2022
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Oct 10, 2022
- Critical9.8Sophos Firewall Code Injection VulnerabilityPatch nowKEVEPSS 98.91%Sep 16, 2022
- High7.2Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityPatch nowKEVEPSS 3.29%Sep 13, 2022
- UnknownWordPress WPGateway Plugin Privilege EscalationPatch nowKEVEPSS 9.21%Sep 13, 2022
- Unknowngeneralbytes crypto_application_server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.66%Sep 2, 2022
- Unknownvoipmonitor voipmonitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 49.99%Aug 19, 2022
Sort