Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOracle Fusion Middleware BI Publisher Unauthenticated Security BypassPatch nowKEVEPSS 36.54%Jan 22, 2024
- Unknownalfresco alfresco URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.47%Jan 22, 2024
- Unknowncarel pcoweb_card_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.93%Jan 22, 2024
- Unknownendress wirelesshart_fieldgate_swg70_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%Jan 22, 2024
- Unknownalibaba fastjson Improper Input ValidationPatch nowKEVEPSS 38.84%Jan 22, 2024
- UnknownWestern Digital my_cloud_pr4100_firmware Improper AuthenticationPatch nowKEVEPSS 73.40%Jan 22, 2024
- Unknowngwolle_guestbook_project gwolle_guestbook Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 37.03%Jan 22, 2024
- Critical9.8sync 2026-10-27T17:29:59ZCheck if you run itEPSS 1.20%Jan 21, 2024
- High7.0A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the…Check if you run itEPSS 0.22%Jan 21, 2024
- Medium6.1Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js.Check if you run itEPSS 0.44%Jan 21, 2024
- Critical9.8D-Link DIR-859 Router Path Traversal VulnerabilityPatch nowKEVEPSS 82.71%Jan 21, 2024
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 63.37%Jan 21, 2024
- Unknownhytec hwl-2511-ss_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 96.98%Jan 21, 2024
- Unknownpluginus woot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.95%Jan 21, 2024
- Unknowncodeastrology woo_product_table Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 25.94%Jan 21, 2024
- Unknownemerson dixell_xweb-500_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 17.55%Jan 21, 2024
- Unknownopentsdb opentsdb Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 85.33%Jan 21, 2024
- UnknownSecure-file-manager plugin through 2.5 for WordPress Remote Code ExecutionPatch nowKEVEPSS 18.28%Jan 21, 2024
- Medium5.3Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11…Check this weekEPSS 14.29%Jan 19, 2024
- UnknownWP Lab wp-lister_lite_for_ebay Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Jan 19, 2024
- Unknownmagnussolution magnusbilling Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.25%Jan 19, 2024
- Medium6.6A flaw was found in the Netfilter subsystem in the Linux kernel.Check if you run itEPSS 0.26%Jan 18, 2024
- High7.8A flaw was found in the X.Org server.Check if you run itEPSS 0.36%Jan 18, 2024
- Medium5.5A flaw was found in the X.Org server.Check if you run itEPSS 0.32%Jan 18, 2024
- Critical9.8A flaw was found in X.Org server.Check if you run itEPSS 2.11%Jan 18, 2024
Sort