Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMetabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 Unauthenticated Command ExecutionPatch nowKEVEPSS 98.68%Nov 13, 2023
- UnknownRank Math seo Missing AuthorizationPatch nowKEVEPSS 9.11%Jul 19, 2023
- Unknowngocloud s2a_wl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.85%Apr 18, 2023
- High8.8MinIO Security Feature Bypass VulnerabilityPatch nowKEVEPSS 7.92%Mar 22, 2023
- Low3.3Arm Mali GPU Kernel Driver Information Disclosure VulnerabilityPatch nowKEVEPSS 1.22%Mar 21, 2023
- UnknownWP Meta SEO WordPress plugin AJAX actions VulnerabilityPatch nowKEVEPSS 0.71%Feb 24, 2023
- UnknownLinksys wap54gv3 Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.64%Feb 8, 2023
- Critical9.8CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jan 5, 2023
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.49%Sep 19, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Check this weekEPSS 96.39%Jun 21, 2022
- High7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.Check this weekEPSS 82.61%May 3, 2022
- Unknowndasanzhone znid_2426a_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 53.36%Apr 12, 2022
- UnknownIBM tealeaf_cx Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 26.92%Jan 12, 2022
- Unknownmetagauss registrationmagic Improper AuthenticationPatch nowKEVEPSS 6.84%Dec 8, 2021
- High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.18%Nov 17, 2021
- Unknowngpononu 1ge_router_wifi_onu_v2801rw_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.72%Nov 11, 2021
- High8.3Linksys x3000 firmware ping_ip command injectionPatch nowKEVEPSS 63.11%Nov 11, 2021
- UnknownCacti Cacti Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.96%Sep 11, 2021
- Unknownwebsvn websvn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 87.30%Aug 30, 2021
- Critical9.8Sunhillo SureLine OS Command Injection VulnerablityPatch nowKEVEPSS 97.83%Aug 13, 2021
- Medium5.3When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are…Check if you run itEPSS 2.00%Aug 5, 2021
- Medium6.5When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file…Check if you run itEPSS 4.33%Aug 5, 2021
- Unknownxinuos openserver Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 39.19%Jun 3, 2021
- Unknowngenexis platinum_4410_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.42%Jun 1, 2021
- UnknownWordPress wordpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 82.74%Apr 12, 2021