Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWicked Folders Plugin for WordPress ajax_save_state Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownLinksys wap54gv3 Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.64%Feb 8, 2023
- Medium6.5Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a cra…Check if you run itEPSS 0.98%Feb 7, 2023
- High8.8Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.65%Feb 7, 2023
- Medium6.5Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI…Check if you run itEPSS 0.51%Feb 7, 2023
- High8.8A flaw was found in libXpm.Check if you run itEPSS 1.20%Feb 7, 2023
- High7.5A flaw was found in libXpm.Check if you run itEPSS 1.28%Feb 7, 2023
- Medium5.4The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where th…Check if you run itEPSS 0.57%Feb 6, 2023
- Critical9.8A vulnerability was found in GNU C Library 2.38.Check if you run itEPSS 1.09%Feb 6, 2023
- High7.2Fortra GoAnywhere MFT Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Feb 6, 2023
- Unknownsunlogin sunflower Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.79%Feb 6, 2023
- High7.5In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.Check if you run itEPSS 0.93%Feb 3, 2023
- Critical9.8sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size.Check if you run itEPSS 1.50%Feb 3, 2023
- Medium6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.Check this weekEPSS 89.79%Feb 3, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_save_template_conditions Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.61%Feb 3, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_reset_previous_import Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.95%Feb 3, 2023
- UnknownRoyal Elementor Addons plugin for WordPress wpr_activate_required_plugins Insufficient Access Control VulnerabilityPatch nowKEVEPSS 0.76%Feb 3, 2023
- UnknownJupiter Theme and JupiterX Core Plugin jupiterx_core_cp_uninstall_template VulnerabilityPatch nowKEVEPSS 1.55%Feb 3, 2023
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 68.86%Feb 3, 2023
- UnknownVMware cloud_foundation Out-of-bounds WritePatch nowKEVEPSS 45.06%Feb 3, 2023
- Unknowniubenda iubenda-cookie-law-solution Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.47%Feb 2, 2023
- Unknowngivewp givewp Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.88%Feb 2, 2023
- High7.5On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with t…Check if you run itEPSS 0.63%Feb 1, 2023
- Medium6.1Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.Check if you run itEPSS 0.64%Feb 1, 2023
- Unknownbeautiful-cookie-banner beautiful_cookie_consent_banner Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 84.34%Feb 1, 2023
Sort