Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIBM operational_decision_manager Deserialization of Untrusted DataPatch nowKEVEPSS 73.40%Mar 22, 2024
- UnknownMiniOrange Malware Scanner plugin and Web Application Firewall plugin for WordPress Priviledge Escalation VulnerabilityPatch nowKEVEPSS 1.71%Mar 21, 2024
- UnknownCrushFTP CrushFTP Improper Control of Dynamically-Managed Code ResourcesPatch nowKEVEPSS 81.80%Mar 21, 2024
- UnknownMicrosoft Word Remote Code ExecutionPatch nowKEVEPSS 84.80%Mar 21, 2024
- UnknownLinksys E2000 Ver.1.0.06 build 1 Authentication BypassPatch nowKEVEPSS 26.66%Mar 19, 2024
- High7.4Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 98.51%Mar 18, 2024
- Unknowndev.institute restrict_user_access Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Mar 18, 2024
- UnknownThemefic Tourfic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Mar 18, 2024
- UnknownTourfic Plugin PHP Object InjectionPatch nowKEVEPSS 0.63%Mar 18, 2024
- UnknownThemefic Tourfic Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.66%Mar 18, 2024
- UnknownQNAP QTS Improper AuthenticationPatch nowKEVEPSS 24.37%Mar 18, 2024
- UnknownIBM operational_decision_manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 76.40%Mar 17, 2024
- UnknownGuangzhou Yingke Electronic Technology Ncast up to 2017 Information DisclosurePatch nowKEVEPSS 66.93%Mar 17, 2024
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.40%Mar 16, 2024
- Unknownukrsolution barcode_scanner_and_inventory_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Mar 15, 2024
- UnknownYITH WooCommerce Product Add-Ons Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.40%Mar 15, 2024
- Unknowntypps calendarista Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.37%Mar 15, 2024
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Mar 15, 2024
- Unknownaiohttp aiohttp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 76.88%Mar 15, 2024
- UnknownWordPress WP Fusion Lite Plugin Remote Code Execution (RCE)Patch nowKEVEPSS 1.61%Mar 13, 2024
- UnknownWordPress Premmerce Permalink Manager for WooCommerce Plugin Local File InclusionPatch nowKEVEPSS 1.46%Mar 13, 2024
- High7.8Microsoft Windows Error Reporting Service Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.98%Mar 12, 2024
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 98.45%Mar 12, 2024
- UnknownUltimate Member User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress Arbitrary Script InjectionPatch nowKEVEPSS 26.67%Mar 8, 2024
- UnknownWeaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 28.48%Mar 7, 2024