Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncambiumnetworks cnpilot_r190v_firmware Active Debug CodePatch nowKEVEPSS 32.36%Jan 3, 2024
- Unknownyaws yaws Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 81.16%Jan 3, 2024
- Unknownjqueryfiletree_project jqueryfiletree Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 59.06%Jan 3, 2024
- Unknowndaan omgf Missing AuthorizationPatch nowKEVEPSS 0.48%Jan 2, 2024
- UnknownApache OFBiz Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 96.00%Jan 2, 2024
- Unknownwavlink wn579x3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 6.55%Jan 2, 2024
- Unknownfusion_builder_project fusion_builder Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 71.43%Jan 2, 2024
- Unknownsitemap_project sitemap Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 11.42%Jan 2, 2024
- Unknownxmlsitemapgenerator xml_sitemap_generator Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.07%Jan 2, 2024
- Unknownarticatech artica_proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.97%Jan 2, 2024
- UnknownVR Calendar WordPress plugin through 2.3.2 Arbitrary PHP Function ExecutiuonPatch nowKEVEPSS 17.56%Jan 1, 2024
- Medium6.1In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS.Patch nowKEVEPSS 0.20%Dec 31, 2023
- Unknownteltonika rut900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 70.66%Dec 31, 2023
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.37%Dec 29, 2023
- Medium6.1undsgn uncode Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Dec 28, 2023
- Unknownsahipro sahi_pro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 46.06%Dec 28, 2023
- Unknownwebtoprint web_to_print_shop\ Files or Directories Accessible to External PartiesPatch nowKEVEPSS 7.88%Dec 25, 2023
- Unknownincomcms_project incomcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 71.33%Dec 25, 2023
- Unknownmidasolutions eframework Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 98.24%Dec 25, 2023
- High7.8Spreadsheet::ParseExcel Remote Code Execution VulnerabilityPatch nowKEVEPSS 18.96%Dec 24, 2023
- UnknownBarracuda ESG Appliance ParseExcel Code Execution VulnerabilityPatch nowKEVEPSS 44.57%Dec 24, 2023
- UnknownSolarWinds Serv-U Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.80%Dec 24, 2023
- UnknownHP edgeline_infrastructure_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 68.29%Dec 24, 2023
- Unknownhongdian h8922 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 27.91%Dec 24, 2023
- Unknowndgtl huemagic Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.33%Dec 24, 2023