Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.Check this weekEPSS 28.59%Feb 8, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.Check this weekEPSS 23.51%Feb 8, 2023
- Unknownwickedplugins wicked_folders Missing AuthorizationPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_save_sort_order Authorization BypassPatch nowKEVEPSS 0.60%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_save_folder Authorization BypassPatch nowKEVEPSS 0.59%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_delete_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_edit_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_clone_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- Unknownwickedplugins wicked_folders Missing AuthorizationPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_move_object function Authorization BypassPatch nowKEVEPSS 0.60%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_save_state Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- High7.2Fortra GoAnywhere MFT Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Feb 6, 2023
- UnknownJupiter Theme and JupiterX Core Plugin jupiterx_core_cp_uninstall_template VulnerabilityPatch nowKEVEPSS 1.55%Feb 3, 2023
- Unknownbeautiful-cookie-banner beautiful_cookie_consent_banner Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 84.34%Feb 1, 2023
- Unknownlb-link bl-lte300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 69.66%Feb 1, 2023
- Unknownawesomemotive duplicator Direct Request ('Forced Browsing')Patch nowKEVEPSS 17.72%Feb 1, 2023
- UnknownD-Link dir-806_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.44%Feb 1, 2023
- High7.0Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 3.67%Jan 30, 2023
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Jan 29, 2023
- High7.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 1.39%Jan 23, 2023
- Medium6.8git2-rs fails to verify SSH keys by defaultCheck if you run itEPSS 0.58%Jan 20, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.75%Jan 18, 2023
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 92.46%Jan 14, 2023
- UnknownEclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5 Security BypassPatch nowKEVEPSS 99.33%Jan 12, 2023
- LowDuplicate of GHSA-4xh4-v2pq-jvhmOpen the advisoryJan 11, 2023
Sort