Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownForminator Contact Form, Payment Form & Custom Form Builder plugin for WordPress Stored Cross Site Scripting VulnerabilityPatch nowKEVEPSS 0.36%Apr 9, 2024
- High8.8Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilityPatch nowKEVEPSS 45.15%Apr 9, 2024
- UnknownProxy Driver Spoofing VulnerabilityPatch nowKEVEPSS 4.85%Apr 9, 2024
- UnknownWordPress 5 Stars Rating Funnel Plugin Arbitrary Content DeletionPatch nowKEVEPSS 0.58%Apr 8, 2024
- Unknownchiyu-tech bf-430_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 79.61%Apr 8, 2024
- UnknownIBM bigfix_platform Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 22.55%Apr 8, 2024
- UnknownIgnite Realtime Openfire Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.94%Apr 8, 2024
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.10%Apr 6, 2024
- UnknownNextChat Internal HTTP Endpoints SSRF and XSSPatch nowKEVEPSS 83.16%Apr 6, 2024
- UnknownCitrix application_delivery_controller_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 23.46%Apr 6, 2024
- Unknownchurch_admin_project church_admin Missing AuthorizationPatch nowKEVEPSS 0.34%Apr 5, 2024
- Unknownchurch_admin_project church_admin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.63%Apr 5, 2024
- UnknownMasteriyo - LMS Plugin Privilege EscalationPatch nowKEVEPSS 2.09%Apr 5, 2024
- UnknownAdobe commerce Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.69%Apr 4, 2024
- Unknownruifang-tech rebuild Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 34.71%Apr 4, 2024
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.49%Apr 4, 2024
- Critical9.8D-Link Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 3, 2024
- Critical9.8D-Link Multiple NAS Devices Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 98.11%Apr 3, 2024
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.59%Apr 3, 2024
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.73%Apr 3, 2024
- UnknownSYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts Arbitrary File UploadPatch nowKEVEPSS 0.63%Apr 3, 2024
- UnknownShortPixel shortpixel_adaptive_images Missing AuthorizationPatch nowKEVEPSS 0.39%Apr 2, 2024
- High7.8Android Pixel Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.68%Apr 2, 2024
- Medium5.5Android Pixel Information Disclosure VulnerabilityPatch nowKEVEPSS 0.49%Apr 2, 2024
- UnknownCloudways Breeze Stored Cross Site ScriptingPatch nowKEVEPSS 0.34%Apr 2, 2024