Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownElementor Pro plugin for WordPress update_page_option Function VulnerabilityPatch nowKEVEPSS 22.72%Jun 7, 2023
- Unknownlegalweb wp_dsgvo_tools Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 7, 2023
- Unknowncolorlib activello Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 65.34%Jun 7, 2023
- High8.8TP-Link Multiple Routers Command Injection VulnerabilityPatch nowKEVEPSS 41.61%Jun 6, 2023
- Medium6.1The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting whi…Check if you run itEPSS 0.46%Jun 5, 2023
- Medium4.3The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133.Check if you run itEPSS 0.21%Jun 3, 2023
- UnknownProgress MOVEit Transfer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.81%Jun 3, 2023
- High7.2SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.Check this weekEPSS 41.44%Jun 1, 2023
- Critical9.8Progress MOVEit Transfer SQL Injection VulnerabilityPatch nowKEVEPSS 99.93%Jun 1, 2023
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 37.86%Jun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.57%Jun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.55%Jun 1, 2023
- High7.5A vulnerability was found in openldap.Check if you run itEPSS 2.00%May 30, 2023
- Medium5.3Xibo is a content management system (CMS).Check if you run itEPSS 0.54%May 30, 2023
- UnknownKyverno vulnerable due to usage of insecure cipherCheck if you run itEPSS 0.20%May 30, 2023
- Medium6.5Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.Check this weekEPSS 75.36%May 30, 2023
- Medium4.7There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel.Check if you run itEPSS 0.19%May 26, 2023
- High7.5GitLab GitLab Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 71.64%May 26, 2023
- High7.5Ignite Realtime Openfire Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%May 26, 2023
- Unknownemby emby.releases Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 1.70%May 25, 2023
- UnknownMStore API plugin for WordPress Authentication Bypass VulnerabilityPatch nowKEVEPSS 3.81%May 25, 2023
- Critical9.8Apache RocketMQ Command Execution VulnerabilityPatch nowKEVEPSS 96.57%May 24, 2023
- Critical9.8Zyxel Multiple Firewalls Buffer Overflow VulnerabilityPatch nowKEVEPSS 29.02%May 24, 2023
- Critical9.8Zyxel Multiple Firewalls Buffer Overflow VulnerabilityPatch nowKEVEPSS 28.14%May 24, 2023
- Medium6.5Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0.Check if you run itEPSS 1.11%May 22, 2023
Sort