Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%May 16, 2018
- Critical9.8Kaseya VSA Remote Code Execution VulnerabilityPatch nowKEVEPSS 29.55%Jan 30, 2018
- UnknownMirasvit helpdesk_mx Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.60%Dec 28, 2017
- Unknownaccesspressthemes ultimate-form-builder-lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.80%Oct 23, 2017
- High7.5Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityPatch nowKEVEPSS 7.07%Sep 28, 2017
- UnknownNETGEAR wnr2000v5_firmware Improper Input ValidationPatch nowKEVEPSS 77.43%Sep 13, 2017
- Critical9.8NETGEAR Multiple Devices Buffer Overflow VulnerabilityPatch nowKEVEPSS 45.75%May 26, 2017
- High8.1NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityPatch nowKEVEPSS 89.35%Jan 17, 2017
- UnknownRed Hat JBoss Application Server Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.14%Mar 25, 2016
- Unknownmagento magento Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.74%Jan 22, 2016
- Unknownmagento magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.93%Jan 22, 2016
- Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 55.77%Jan 22, 2016
- Critical9.8Juniper ScreenOS Improper Authentication VulnerabilityPatch nowKEVEPSS 61.14%Dec 19, 2015
- Unknownbelkin f5d7230-4 Improper AuthenticationPatch nowKEVEPSS 4.90%May 22, 2015
- High7.8Apple OS X Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.89%Apr 10, 2015
- Unknowncolorlib fancybox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.41%Feb 17, 2015
- High8.0D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 43.46%Jan 13, 2015
- UnknownThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress Admin AJAX Security BypassPatch nowKEVEPSS 75.56%Dec 15, 2014
- High8.8Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 87.33%Nov 18, 2014
- UnknownQNAP QTS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 66.15%Sep 22, 2014
- Unknownelegantthemes divi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.89%Sep 3, 2014
- Unknownthemepunch slider_revolution Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.49%Sep 3, 2014
- Unknownwp-ecommerce easy_wp_smtp Missing AuthorizationPatch nowKEVEPSS 4.46%Jul 23, 2014
- Critical9.8InduSoft Web Studio NTWebServer Directory Traversal VulnerabilityPatch nowKEVEPSS 74.68%Apr 24, 2014
- Unknownoptimizepress optimizepress Improper Input ValidationPatch nowKEVEPSS 14.80%Dec 23, 2013
Sort