Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncookieinformation wp-gdpr-compliance Missing AuthorizationPatch nowKEVEPSS 1.46%Jan 29, 2024
- UnknownFortra GoAnywhere MFT Direct Request ('Forced Browsing')Patch nowKEVEPSS 95.09%Jan 25, 2024
- Unknownlikeshop likeshop Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.92%Jan 22, 2024
- Unknownh2o h2o Missing AuthorizationPatch nowKEVEPSS 4.34%Jan 22, 2024
- Unknownreadtomyshoe_project readtomyshoe Generation of Error Message Containing Sensitive InformationPatch nowKEVEPSS 3.86%Jan 22, 2024
- Unknownopenautomationsoftware oas_platform Missing Authentication for Critical FunctionPatch nowKEVEPSS 37.64%Jan 22, 2024
- Unknownapereo central_authentication_service Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.19%Jan 22, 2024
- Unknownonline-shopping-system-advanced_project online-shopping-system-advanced Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 51.77%Jan 22, 2024
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 19.26%Jan 22, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
- Unknownsfcyazilim sonlogger Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 47.52%Jan 22, 2024
- UnknownLumis lumis_experience_platform Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 18.13%Jan 22, 2024
- Unknownvoid aurall_rec_monitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.25%Jan 22, 2024
- Unknowncars-seller-auto-classifieds-script_project cars-seller-auto-classifieds-script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.70%Jan 22, 2024
- UnknownZTE mf971r_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 55.71%Jan 22, 2024
- Unknowninstructure canvas_learning_management_service Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 6.59%Jan 22, 2024
- Unknownqcubed qcubed Deserialization of Untrusted DataPatch nowKEVEPSS 4.98%Jan 22, 2024
- UnknownRed Hat keycloak Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.72%Jan 22, 2024
- Unknownalfresco alfresco URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.47%Jan 22, 2024
- Unknownalibaba fastjson Improper Input ValidationPatch nowKEVEPSS 39.24%Jan 22, 2024
- Critical9.8D-Link DIR-859 Router Path Traversal VulnerabilityPatch nowKEVEPSS 82.71%Jan 21, 2024
- Unknowncodeastrology woo_product_table Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 25.94%Jan 21, 2024
- Unknownmagnussolution magnusbilling Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.25%Jan 19, 2024
- High8.2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 100.00%Jan 15, 2024
- UnknownSchneider Electric net5501_firmware Improper AuthenticationPatch nowKEVEPSS 36.65%Jan 13, 2024
Sort