Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gal…Check if you run itEPSS 0.44%Mar 22, 2023
- Medium5.4The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the techno_ge…Check if you run itEPSS 0.89%Mar 22, 2023
- High8.8The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in the ‘fieldmap’ parameter in the fpropdf_export_file action.Check if you run itEPSS 0.93%Mar 22, 2023
- High7.5A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.Check if you run itEPSS 3.98%Mar 22, 2023
- High7.8A use-after-free flaw was found in Linux kernel before 5.19.2.Check if you run itEPSS 0.26%Mar 22, 2023
- High8.8MinIO Security Feature Bypass VulnerabilityPatch nowKEVEPSS 7.92%Mar 22, 2023
- High7.5MinIO Information Disclosure VulnerabilityPatch nowKEVEPSS 83.96%Mar 22, 2023
- High7.8Linux Kernel Improper Ownership Management VulnerabilityPatch nowKEVEPSS 7.88%Mar 22, 2023
- High7.5dio vulnerable to CRLF injection with HTTP method stringCheck if you run itEPSS 1.17%Mar 21, 2023
- Unknowngeneralbytes crypto_application_server Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 20.61%Mar 21, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- Low3.3Arm Mali GPU Kernel Driver Information Disclosure VulnerabilityPatch nowKEVEPSS 1.22%Mar 21, 2023
- UnknownBeRocket Plugins for WordPress Authorization BypassPatch nowKEVEPSS 0.23%Mar 21, 2023
- UnknownStrapi Strapi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 54.08%Mar 21, 2023
- UnknownStrapi Strapi Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 97.64%Mar 21, 2023
- Unknownqbittorrent qbittorrent Use of Default CredentialsPatch nowKEVEPSS 1.24%Mar 19, 2023
- Critical9.8ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.Check if you run itEPSS 2.99%Mar 17, 2023
- UnknownSquirrly SEO Squirrly SEO Plugin Missing Authorization VulnerabilityPatch nowKEVEPSS 0.40%Mar 17, 2023
- Critical9.8D-Link DIR-820 Router OS Command Injection VulnerabilityPatch nowKEVEPSS 97.86%Mar 15, 2023
- Critical9.8Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 68.08%Mar 15, 2023
- High8.8TP-Link Archer AX-21 Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Mar 15, 2023
- High8.8A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3).Check if you run itEPSS 0.80%Mar 14, 2023
- Medium4.3A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3).Check if you run itEPSS 0.52%Mar 14, 2023
- High7.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Check if you run itEPSS 0.22%Mar 14, 2023
Sort