Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownlifterlms lifterlms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.85%Jan 31, 2023
- High7.0Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 3.67%Jan 30, 2023
- UnknownRank Math Rank Math SEO allows Directory Traversal VulnerabilityPatch nowKEVEPSS 0.95%Jan 30, 2023
- UnknownRank Math seo URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.07%Jan 30, 2023
- Unknownquerysol redirection_for_contact_form_7 Incorrect AuthorizationPatch nowKEVEPSS 7.36%Jan 29, 2023
- Unknownelementor Website Builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Jan 29, 2023
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.55%Jan 24, 2023
- High7.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 1.39%Jan 23, 2023
- Unknownsmashballoon smash_balloon_social_post_feed Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.68%Jan 23, 2023
- UnknownGrand Theft Auto V for PC Partial Remote Code Execution and File ModificationPatch nowKEVEPSS 1.52%Jan 22, 2023
- Unknownthimpress learnpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.06%Jan 20, 2023
- Unknownthimpress learnpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.27%Jan 20, 2023
- UnknownWpmet elements_kit_elementor_addons Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.63%Jan 19, 2023
- High7.8Adobe Acrobat and Reader Use-After-Free VulnerabilityPatch nowKEVEPSS 59.43%Jan 18, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.75%Jan 18, 2023
- Unknownninjaforms ninja_forms Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.89%Jan 18, 2023
- High7.5Oracle WebLogic Server Unspecified VulnerabilityPatch nowKEVEPSS 99.90%Jan 17, 2023
- UnknownWindows SMB Remote Code ExecutionPatch nowKEVEPSS 38.05%Jan 17, 2023
- UnknownElastic Endpoint Security for Windows Ransomware Canaries Features Local Privilege EscalationPatch nowKEVEPSS 0.23%Jan 17, 2023
- UnknownGoogle Chrome Use After FreePatch nowKEVEPSS 0.76%Jan 17, 2023
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 92.46%Jan 14, 2023
- UnknownCitrix ShareFile Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.12%Jan 13, 2023
- UnknownApache commons_text Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 99.93%Jan 12, 2023
- Unknownnortekcontrol emerge_e3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.59%Jan 12, 2023
- Unknownithemes backupbuddy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 63.76%Jan 12, 2023