Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jan 5, 2023
- High7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform.Check if you run itEPSS 0.38%Jan 5, 2023
- Medium5.3A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x.Check if you run itEPSS 1.02%Jan 5, 2023
- High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 80.14%Jan 4, 2023
- UnknownJeg Elementor Kit Plugin for WordPress MailChimp API Key VulnerabilityPatch nowKEVEPSS 1.69%Jan 3, 2023
- Critical9.8blocksera cryptocurrency_widgets_pack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.84%Jan 2, 2023
- Low3.3lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to oCheck if you run itEPSS 0.72%Jan 1, 2023
- Unknownetoilewebdesign ultimate_faq Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.84%Dec 30, 2022
- Unknownetoilewebdesign ultimate_faq Missing Authentication for Critical FunctionPatch nowKEVEPSS 3.52%Dec 30, 2022
- Unknowntagdiv newspaper Improper Privilege ManagementPatch nowKEVEPSS 9.27%Dec 30, 2022
- Medium6.1php_curl_class_project php_curl_class Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.27%Dec 26, 2022
- UnknownUser Post Gallery WordPress plugin Callback Functions VulnerabilityPatch nowKEVEPSS 42.72%Dec 26, 2022
- High8.8PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS…Check if you run itEPSS 6.86%Dec 25, 2022
- Medium5.5An issue was discovered in the Linux kernel 5.10.x before 5.10.155.Check if you run itEPSS 0.38%Dec 23, 2022
- High7.5A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.Check this weekEPSS 16.60%Dec 23, 2022
- Medium5.5A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device.Check if you run itEPSS 0.37%Dec 22, 2022
- Unknownyithemes yith_woocommerce_gift_cards Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 13.51%Dec 22, 2022
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.58%Dec 21, 2022
- UnknownTenda hg9_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.20%Dec 21, 2022
- UnknownLinuxKI Toolset 6.0-1 Remote Code ExecutionPatch nowKEVEPSS 98.75%Dec 21, 2022
- UnknownD-Link dir-619l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.40%Dec 21, 2022
- Unknownzivif pr115-204-p-rs_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.56%Dec 21, 2022
- Critical9.8Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.Check if you run itEPSS 1.67%Dec 20, 2022
- Unknownsygnoos popup_builder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.23%Dec 19, 2022
- High7.1An issue was discovered in the Linux kernel before 6.0.11.Check if you run itEPSS 0.31%Dec 18, 2022
Sort