Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 97.17%Mar 24, 2025
- Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 74.06%Mar 24, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationPatch nowKEVEPSS 99.40%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized mirror annotationsCheck this weekEPSS 86.15%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotationCheck this weekEPSS 36.96%Mar 23, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-url annotationCheck this weekEPSS 37.28%Mar 23, 2025
- Unknowningress-nginx controller auth secret file path traversal vulnerabilityCheck if you run itEPSS 3.33%Mar 23, 2025
- UnknownHorde imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 31.29%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.96%Mar 21, 2025
- Unknownmagnussolution magnusbilling Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.15%Mar 21, 2025
- UnknownDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004Check if you run itEPSS 0.50%Mar 19, 2025
- High8.6reviewdog/action-setup GitHub Action Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 2.48%Mar 19, 2025
- UnknownWhatsApp PDF Content Sandbox BypassPatch nowKEVEPSS 0.26%Mar 19, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.88%Mar 19, 2025
- Unknownrevmakx backup_and_staging_by_wp_time_capsule Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 94.14%Mar 19, 2025
- Unknownvicidial vicidial Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 79.27%Mar 19, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 76.80%Mar 19, 2025
- UnknownLiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.40%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.54%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.69%Mar 19, 2025
- UnknownZabbix zabbix Improper Input ValidationPatch nowKEVEPSS 76.62%Mar 19, 2025
- Unknownunitecms unlimited_addons_for_wpbakery_page_builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.48%Mar 19, 2025
- Unknownthemepunch slider_revolution Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.69%Mar 19, 2025
Sort