Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 93.23%Dec 5, 2024
- Unknownhoverfly hoverfly Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 55.57%Dec 5, 2024
- UnknownFOG packages/web/lib/fog/reportmaker.class.php Command Injection VulnerabilityPatch nowKEVEPSS 23.24%Dec 5, 2024
- UnknownOpenAPI Generator outputFolder VulnerabilityPatch nowKEVEPSS 3.59%Dec 5, 2024
- UnknownF-logic DataCube3 /admin/transceiver_schedule.php File Upload VulnerabilityPatch nowKEVEPSS 12.75%Dec 5, 2024
- UnknownMicrosoft authenticator Improper AuthenticationPatch nowKEVEPSS 1.27%Dec 5, 2024
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 23.22%Dec 5, 2024
- Unknownchamilo chamilo Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 76.08%Dec 5, 2024
- Unknownsuperwebmailer superwebmailer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.11%Dec 5, 2024
- Unknownphonepe phonepe Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 37.67%Dec 5, 2024
- Unknownseiko-sol skybridge_mb-a200_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 1.76%Dec 5, 2024
- Unknownwavlink wl-wn531p3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.52%Dec 5, 2024
- Unknownruijienetworks reyeeos Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.14%Dec 5, 2024
- UnknownAcmailer and Acmailer DB Survey Function VulnerabilityPatch nowKEVEPSS 7.41%Dec 5, 2024
- High7.8Linux Kernel Out-of-Bounds Access VulnerabilityPatch nowKEVEPSS 4.12%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Arbitrary OS Command ExecutionPatch nowKEVEPSS 0.57%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Admin Account Arbitrary OS Command ExecutionPatch nowKEVEPSS 0.90%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Guest Account Credential DisclosurePatch nowKEVEPSS 0.47%Dec 4, 2024
- UnknownKubePi JWT Token Login Bypass VulnerabilityPatch nowKEVEPSS 8.39%Dec 3, 2024
- Unknownfujitsu esprimo_d556\/2_firmware Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 1.84%Nov 29, 2024
- Critical9.8Microsoft Partner Center Improper Access Control VulnerabilityPatch nowKEVEPSS 1.30%Nov 26, 2024
- Critical9.8ProjectSend Improper Authentication VulnerabilityPatch nowKEVEPSS 91.85%Nov 26, 2024
- Unknowncleantalk spam_protection\,_antispam\,_firewall Improper Check or Handling of Exceptional ConditionsPatch nowKEVEPSS 3.71%Nov 26, 2024
- UnknownTP-Link Router AX50 Authenticated Remote Code Execution VulnerabilityPatch nowKEVEPSS 34.63%Nov 26, 2024
- Unknownecoa ecs_router_controller-ecs_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.43%Nov 26, 2024