Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownResponsive theme for WordPress save_footer_text_callback VulnerabilityPatch nowKEVEPSS 0.65%Apr 1, 2024
- UnknownAtlassian Jira Server and Data Center Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.06%Mar 30, 2024
- UnknownSonicWall sma_200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.75%Mar 30, 2024
- Unknownwavlink wn530h4_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 74.65%Mar 30, 2024
- Unknowntypps calendarista Missing AuthorizationPatch nowKEVEPSS 0.41%Mar 29, 2024
- UnknownAutomatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request ForgeryPatch nowKEVEPSS 72.77%Mar 29, 2024
- UnknownNotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL InjectionPatch nowKEVEPSS 77.59%Mar 29, 2024
- High8.8avada fusion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.74%Mar 28, 2024
- Unknownchurch_admin_project church_admin Missing AuthorizationPatch nowKEVEPSS 0.47%Mar 28, 2024
- Unknownmailster mailster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 28, 2024
- Unknownposimyth nexter_blocks Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.42%Mar 28, 2024
- UnknownFCKeditor before 2.3 Beta editor/filemanager/upload/php/upload.php Arbitrary File UploadPatch nowKEVEPSS 2.42%Mar 28, 2024
- Unknownchurch_admin_project church_admin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.66%Mar 26, 2024
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 0.62%Mar 26, 2024
- UnknownSunshine Photo Cart Plugin PHP Object InjectionPatch nowKEVEPSS 0.46%Mar 26, 2024
- Unknowncastos seriously_simple_podcasting Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 26, 2024
- Unknownanyscale ray Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 83.94%Mar 26, 2024
- UnknownWP Lab wp-lister_lite_for_amazon Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.40%Mar 25, 2024
- Unknownsunshinephotocart sunshine_photo_cart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.72%Mar 25, 2024
- UnknownCodeCabin wp_go_maps Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 25, 2024
- Unknownunlimited-elements unlimited_elements_for_elementor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.74%Mar 25, 2024
- Unknownincsub forminator Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Mar 25, 2024
- Critical9.8Tenda ac15_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.01%Mar 24, 2024
- UnknownQNAP QTS Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 1.56%Mar 24, 2024
- High7.5Microsoft .NET Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 98.62%Mar 22, 2024