Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSiteGround Optimizer plugin for WordPress switch_php Function VulnerabilityPatch nowKEVEPSS 0.85%Oct 15, 2024
- UnknownARI-Adminer plugin for WordPress Authorization Bypass VulnerabilityPatch nowKEVEPSS 0.41%Oct 15, 2024
- UnknownShopWP plugin for WordPress REST API Routes VulnerabilityPatch nowKEVEPSS 0.35%Oct 15, 2024
- UnknownAdvanced Access Manager plugin for WordPress aam-media Parameter VulnerabilityPatch nowKEVEPSS 2.77%Oct 15, 2024
- UnknownFile Manager plugin for WordPress /inc/root.php File Upload VulnerabilityPatch nowKEVEPSS 0.81%Oct 15, 2024
- UnknownFormidable Form Builder plugin for WordPress frm_forms_preview AJAX Action VulnerabilityPatch nowKEVEPSS 1.13%Oct 15, 2024
- UnknownFormidable Form Builder plugin for WordPress after_html Stored Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 1.09%Oct 15, 2024
- UnknownFrontend File Manager and N-Media Post Front-end Form plugins for WordPress nm_filemanager_upload_file and nm_postfront_upload_file AJAX VulnerabilityPatch nowKEVEPSS 5.72%Oct 15, 2024
- UnknownMainWP Dashboard -The Private WordPress Manager for Multiple Website Maintenance Plugin mwp_setup_purchase_username' Parameter VulnerabilityPatch nowKEVEPSS 1.34%Oct 15, 2024
- UnknownKento Post View Counter plugin for WordPress kento_pvc_geo Parameter VulnerabilityPatch nowKEVEPSS 0.55%Oct 15, 2024
- Unknownbinarymoon timthumb Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.75%Oct 15, 2024
- UnknownMapplic and Mapplic Lite plugins for WordPress SVG File Server Side Request Forgery VulnerabilityPatch nowKEVEPSS 1.18%Oct 15, 2024
- UnknownAngular-base64-upload demo/server.php VulnerabilityPatch nowKEVEPSS 39.95%Oct 14, 2024
- Unknowntrendnet tew-652brp_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.85%Oct 12, 2024
- UnknownASUS asuswrt Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.77%Oct 12, 2024
- UnknownHunk Companion Plugin for WordPress /wp-json/hc/v1/themehunk-import REST API VulnerabilityPatch nowKEVEPSS 9.08%Oct 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 2.31%Oct 11, 2024
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 0.50%Oct 11, 2024
- UnknownRed Hat satellite Insufficient Session ExpirationPatch nowKEVEPSS 0.65%Oct 10, 2024
- Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityPatch nowKEVEPSS 99.63%Oct 9, 2024
- Critical9.9Palo Alto Networks Expedition OS Command Injection VulnerabilityPatch nowKEVEPSS 98.55%Oct 9, 2024
- Critical9.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 23.18%Oct 9, 2024
- UnknownD-Link dir-816_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.10%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- UnknownIvanti CSA Path Traversal Security Bypass VulnerabilityPatch nowKEVEPSS 15.55%Oct 8, 2024