Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in Tenda AC9 15.03.02.13.Check if you run itEPSS 2.77%Jun 7, 2025
- Medium6.4The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theCheck if you run itEPSS 0.20%Jun 7, 2025
- High7.2The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross Edition plugins for WordPress are vulnerable to Stored CrossCheck if you run itEPSS 0.35%Jun 7, 2025
- Unknownfoxcms foxcms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 47.24%Jun 7, 2025
- UnknownKentico Xperience CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 60.59%Jun 7, 2025
- Unknownganglia ganglia-web Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.61%Jun 7, 2025
- UnknownSonatype nexus_repository_manager Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.81%Jun 7, 2025
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.35%Jun 7, 2025
- Unknownjhpyle docassemble Use of Incorrectly-Resolved Name or ReferencePatch nowKEVEPSS 69.49%Jun 7, 2025
- UnknownCisco Smart Licensing Utility Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 51.90%Jun 7, 2025
- Unknownhrp2000 e-hr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.74%Jun 7, 2025
- Unknownwwbn avideo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.27%Jun 7, 2025
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 33.98%Jun 7, 2025
- UnknownXWiki xwiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.19%Jun 7, 2025
- UnknownH3C magic_r300-2100m_firmware Out-of-bounds WritePatch nowKEVEPSS 4.35%Jun 7, 2025
- UnknownApache OFBiz Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.18%Jun 7, 2025
- Unknowntecrail responsive_filemanager Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.63%Jun 7, 2025
- Unknownzoneminder zoneminder Improper AuthenticationPatch nowKEVEPSS 7.92%Jun 7, 2025
- Unknownshirne_cms_project shirne_cms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.54%Jun 7, 2025
- Unknowna3rev page_view_count Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.78%Jun 7, 2025
- Unknownauerswald comfortel_3600_ip_firmware Use of Incorrectly-Resolved Name or ReferencePatch nowKEVEPSS 50.13%Jun 7, 2025
- Unknownasgaros asgaros_forum Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.56%Jun 7, 2025
- UnknownVmware vSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVJun 7, 2025
- UnknownJenkins gitlab_hook Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 93.21%Jun 7, 2025
- Unknownweiphp weiphp Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.75%Jun 7, 2025
Sort