Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncomodo unified_threat_management_firewall Improper AuthenticationPatch nowKEVEPSS 83.91%Apr 15, 2024
- Unknownjpcert logontracer Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 74.92%Apr 15, 2024
- UnknownDell emc_idrac7 Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 90.09%Apr 15, 2024
- UnknownApache Struts Improper Input ValidationPatch nowKEVEPSS 87.12%Apr 15, 2024
- UnknownFortinet fortiwlm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.32%Apr 14, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 12, 2024
- UnknownInstaWP Connect 1-click WP Staging & Migration plugin for WordPress Arbitrary File UploadPatch nowKEVEPSS 5.75%Apr 12, 2024
- UnknownN-able N-central Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.95%Apr 11, 2024
- Unknownawesomemotive duplicator Files or Directories Accessible to External PartiesPatch nowKEVEPSS 30.89%Apr 11, 2024
- Unknowndocumentlocator document_locator Improper AuthenticationPatch nowKEVEPSS 60.78%Apr 11, 2024
- UnknownThinkPHP ThinkPHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 30.24%Apr 11, 2024
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 81.83%Apr 11, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols…Check if you run itEPSS 0.31%Apr 10, 2024
- High8.8A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0…Check if you run itEPSS 0.75%Apr 9, 2024
- UnknownForminator Contact Form, Payment Form & Custom Form Builder plugin for WordPress Stored Cross Site Scripting VulnerabilityPatch nowKEVEPSS 0.36%Apr 9, 2024
- High8.8Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilityPatch nowKEVEPSS 45.15%Apr 9, 2024
- UnknownProxy Driver Spoofing VulnerabilityPatch nowKEVEPSS 4.85%Apr 9, 2024
- Medium5.9Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit ce…Check this weekEPSS 52.42%Apr 8, 2024
- UnknownWordPress 5 Stars Rating Funnel Plugin Arbitrary Content DeletionPatch nowKEVEPSS 0.58%Apr 8, 2024
- Unknownchiyu-tech bf-430_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 79.61%Apr 8, 2024
- UnknownIBM bigfix_platform Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 22.55%Apr 8, 2024
- UnknownIgnite Realtime Openfire Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.94%Apr 8, 2024
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.10%Apr 6, 2024
- UnknownNextChat Internal HTTP Endpoints SSRF and XSSPatch nowKEVEPSS 83.16%Apr 6, 2024
- UnknownCitrix application_delivery_controller_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 23.46%Apr 6, 2024
Sort