Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- UnknownBeRocket Plugins for WordPress Authorization BypassPatch nowKEVEPSS 0.23%Mar 21, 2023
- High8.8TP-Link Archer AX-21 Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Mar 15, 2023
- High8.8github-slug-action vulnerable to arbitrary code executionCheck if you run itEPSS 1.58%Mar 13, 2023
- High8.2A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, Fort…Check if you run itEPSS 0.22%Mar 7, 2023
- Medium6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs ar…Check if you run itEPSS 0.88%Feb 23, 2023
- Critical9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.Check if you run itEPSS 0.90%Feb 23, 2023
- Medium5.4A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticated users to injec…Check if you run itEPSS 0.43%Feb 22, 2023
- Medium5.4A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet FortiOS 7.2.0 through 7.2.2, FortiOS 7.0.0 through 7.…Check if you run itEPSS 0.46%Feb 16, 2023
- UnknownAirspan AirSpot 5410 version 0.3.4.1-4 and under Remote Code ExecutionPatch nowKEVEPSS 54.55%Feb 15, 2023
- Critical9.8Multiple Ruckus Wireless Products CSRF and RCE VulnerabilityPatch nowKEVEPSS 98.07%Feb 13, 2023
- Unknownsunlogin sunflower Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.79%Feb 6, 2023
- Unknowniubenda iubenda-cookie-law-solution Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.47%Feb 2, 2023
- Unknowndcnglobal dcbi-netlog-lab_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 48.71%Feb 1, 2023
- Unknownawesomemotive duplicator Direct Request ('Forced Browsing')Patch nowKEVEPSS 17.72%Feb 1, 2023
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Jan 29, 2023
- High7.5A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent.Check if you run itEPSS 3.55%Jan 17, 2023
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.74%Jan 11, 2023
- High8.8Multiple SugarCRM Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 80.14%Jan 4, 2023
- High7.5A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.Check this weekEPSS 16.60%Dec 23, 2022
- Unknownzivif pr115-204-p-rs_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.56%Dec 21, 2022
- Critical9.8Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.47%Dec 12, 2022
- Unknownzivif pr115-204-p-rs_firmware Insufficiently Protected CredentialsPatch nowKEVEPSS 15.26%Dec 8, 2022
- Unknowndw megapix_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.81%Dec 6, 2022
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…Check if you run itEPSS 5.09%Dec 5, 2022
Sort