Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncambiumnetworks cnpilot_r190v_firmware Active Debug CodePatch nowKEVEPSS 33.25%Jan 3, 2024
- Unknownyaws yaws Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 81.03%Jan 3, 2024
- Unknownjqueryfiletree_project jqueryfiletree Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 59.06%Jan 3, 2024
- Medium4.4A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel.Check if you run itEPSS 0.30%Jan 2, 2024
- Medium6.7A use-after-free flaw was found in the netfilter subsystem of the Linux kernel.Check if you run itEPSS 0.84%Jan 2, 2024
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)Check if you run itEPSS 3.35%Jan 2, 2024
- Medium5.3A stack based buffer overflow was found in the virtio-net device of QEMU.Check if you run itEPSS 0.33%Jan 2, 2024
- Medium5.4XSS can be stored in DB from "add a message form" in order detail page (FO)Check if you run itEPSS 0.39%Jan 2, 2024
- High8.1Some attribute not escaped in Validate::isCleanHTML methodCheck if you run itEPSS 0.52%Jan 2, 2024
- Unknowndaan omgf Missing AuthorizationPatch nowKEVEPSS 0.48%Jan 2, 2024
- UnknownApache OFBiz Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 96.00%Jan 2, 2024
- Unknownwavlink wn579x3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 6.55%Jan 2, 2024
- Unknownfusion_builder_project fusion_builder Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 71.43%Jan 2, 2024
- Unknownsitemap_project sitemap Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 11.42%Jan 2, 2024
- Unknownxmlsitemapgenerator xml_sitemap_generator Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.07%Jan 2, 2024
- Unknownarticatech artica_proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 52.34%Jan 2, 2024
- UnknownVR Calendar WordPress plugin through 2.3.2 Arbitrary PHP Function ExecutiuonPatch nowKEVEPSS 17.60%Jan 1, 2024
- Medium6.1In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS.Patch nowKEVEPSS 0.20%Dec 31, 2023
- Unknownteltonika rut900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 70.66%Dec 31, 2023
- Critical9.8dynamiapps frontend_admin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.62%Dec 29, 2023
- High7.3A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical.Check if you run itEPSS 1.46%Dec 29, 2023
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.37%Dec 29, 2023
- Medium6.1undsgn uncode Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Dec 28, 2023
- High7.8gl-inet gl-mt1300_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.12%Dec 28, 2023
- Unknownsahipro sahi_pro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 46.06%Dec 28, 2023
Sort