Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownQuantumCloud infographic_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.88%Nov 30, 2023
- Unknownwptaskforce wpcargo_track_\&_trace Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 56.15%Nov 30, 2023
- UnknownSAP scimono Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 10.12%Nov 30, 2023
- Unknownbuddypress buddypress Incorrect AuthorizationPatch nowKEVEPSS 13.52%Nov 29, 2023
- UnknownAmcrest ipm-721s_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 3.80%Nov 28, 2023
- UnknownSteveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 SQL InjectionPatch nowKEVEPSS 4.95%Nov 27, 2023
- Unknowntitle_experiments_free_project title_experiments_free Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.08%Nov 27, 2023
- Unknownsas sas\/intrnet Inclusion of Functionality from Untrusted Control SpherePatch nowKEVEPSS 7.97%Nov 27, 2023
- Unknownniceforyou linear_emerge_e3_access_control_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.83%Nov 26, 2023
- Unknownkirona dynamic_resource_scheduling Direct Request ('Forced Browsing')Patch nowKEVEPSS 48.30%Nov 26, 2023
- Unknownicewarp mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 40.97%Nov 26, 2023
- Unknownkubeview_project kubeview Missing Authentication for Critical FunctionPatch nowKEVEPSS 51.70%Nov 25, 2023
- Unknownlimesurvey limesurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 97.18%Nov 25, 2023
- Unknowndahuasecurity dh-ipc-hdbw23a0rn-zs_firmware Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 36.75%Nov 23, 2023
- Unknownuserproplugin userpro Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 6.75%Nov 22, 2023
- Unknownays-pro secure_copy_content_protection_and_content_locking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 78.81%Nov 22, 2023
- Unknownsuperwebmailer superwebmailer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 32.84%Nov 22, 2023
- High7.5ownCloud graphapi Information Disclosure VulnerabilityPatch nowKEVEPSS 78.43%Nov 21, 2023
- UnknownUserPro plugin for WordPress userpro shortcut VulnerabilityPatch nowKEVEPSS 0.84%Nov 21, 2023
- UnknownZoho manageengine_firewall_analyzer Improper Handling of Exceptional ConditionsPatch nowKEVEPSS 7.25%Nov 17, 2023
- Unknownbadgeos badgos Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.32%Nov 17, 2023
- Unknownnirweb nirweb_support Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.05%Nov 17, 2023
- UnknownApache CouchDB Improper Privilege ManagementPatch nowKEVEPSS 99.84%Nov 17, 2023
- UnknownCisco RV Series Routers Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 77.73%Nov 15, 2023
- High7.8Microsoft Windows Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 12.09%Nov 14, 2023
Sort