Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.Check if you run itEPSS 0.93%Feb 3, 2023
- Critical9.8sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size.Check if you run itEPSS 1.50%Feb 3, 2023
- Medium6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.Check this weekEPSS 89.79%Feb 3, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_save_template_conditions Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.61%Feb 3, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_reset_previous_import Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.95%Feb 3, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_activate_required_plugins Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.76%Feb 3, 2023
- UnknownJupiter Theme and JupiterX Core Plugin jupiterx_core_cp_uninstall_template VulnerabilityPatch nowKEVEPSS 1.55%Feb 3, 2023
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 68.86%Feb 3, 2023
- UnknownVMware cloud_foundation Out-of-bounds WritePatch nowKEVEPSS 45.06%Feb 3, 2023
- Unknowniubenda iubenda-cookie-law-solution Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.47%Feb 2, 2023
- Unknowngivewp givewp Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.88%Feb 2, 2023
- Unknownbeautiful-cookie-banner beautiful_cookie_consent_banner Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 84.34%Feb 1, 2023
- UnknownTenda g103_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 22.93%Feb 1, 2023
- Unknowndcnglobal dcbi-netlog-lab_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 48.71%Feb 1, 2023
- Unknownlb-link bl-lte300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 77.69%Feb 1, 2023
- Unknownawesomemotive duplicator Direct Request ('Forced Browsing')Patch nowKEVEPSS 17.72%Feb 1, 2023
- UnknownD-Link dir-806_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.44%Feb 1, 2023
- Unknownawesomemotive duplicator Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 60.09%Feb 1, 2023
- Unknownlifterlms lifterlms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.85%Jan 31, 2023
- High7.0Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 3.67%Jan 30, 2023
- Medium5.5GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.Check if you run itEPSS 1.49%Jan 30, 2023
- UnknownRank Math Rank Math SEO allows Directory Traversal VulnerabilityPatch nowKEVEPSS 0.95%Jan 30, 2023
- UnknownRank Math seo URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.50%Jan 30, 2023
- Unknownquerysol redirection_for_contact_form_7 Incorrect AuthorizationPatch nowKEVEPSS 7.36%Jan 29, 2023
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Jan 29, 2023
Sort