Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSAP knowledge_warehouse Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 23.40%Apr 18, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/policies/validation/condition/Patch nowKEVEPSS 7.89%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/events/subscriptionsPatch nowKEVEPSS 2.37%Apr 17, 2024
- UnknownOpenMetadata Authentication BypassPatch nowKEVEPSS 73.26%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/events/subscriptions/validation/condition/Patch nowKEVEPSS 45.73%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/policiesPatch nowKEVEPSS 12.53%Apr 17, 2024
- High7.1Barcode Scanner with Inventory & Order Manager Missing AuthorizationPatch nowKEVEPSS 0.17%Apr 16, 2024
- UnknownWP 2FA Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.41%Apr 16, 2024
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.51%Apr 16, 2024
- UnknownHamid Alinia - idehweb Login With Phone Number Privilege EscalationPatch nowKEVEPSS 0.46%Apr 15, 2024
- Unknowncraftcms Craft CMS Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 94.22%Apr 15, 2024
- UnknownPipeline: Groovy Plugin 2.61 and earlier Sandbox BypassPatch nowKEVEPSS 86.05%Apr 15, 2024
- Unknowncomodo unified_threat_management_firewall Improper AuthenticationPatch nowKEVEPSS 83.91%Apr 15, 2024
- Unknownjpcert logontracer Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 74.92%Apr 15, 2024
- UnknownDell emc_idrac7 Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 90.09%Apr 15, 2024
- UnknownApache Struts Improper Input ValidationPatch nowKEVEPSS 87.12%Apr 15, 2024
- UnknownFortinet fortiwlm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.32%Apr 14, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 12, 2024
- UnknownInstaWP Connect 1-click WP Staging & Migration plugin for WordPress Arbitrary File UploadPatch nowKEVEPSS 5.75%Apr 12, 2024
- UnknownN-able N-central Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.95%Apr 11, 2024
- Unknownawesomemotive duplicator Files or Directories Accessible to External PartiesPatch nowKEVEPSS 30.89%Apr 11, 2024
- Unknowndocumentlocator document_locator Improper AuthenticationPatch nowKEVEPSS 60.78%Apr 11, 2024
- UnknownThinkPHP ThinkPHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 28.73%Apr 11, 2024
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 81.83%Apr 11, 2024
- UnknownForminator Contact Form, Payment Form & Custom Form Builder plugin for WordPress Stored Cross Site Scripting VulnerabilityPatch nowKEVEPSS 0.36%Apr 9, 2024