Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityPatch nowKEVEPSS 98.61%Sep 19, 2024
- UnknownTenda AC18 V15.03.05.05 Firmware formexeCommand Function Command InjectionPatch nowKEVEPSS 1.90%Sep 19, 2024
- UnknownZTE mf833u1_firmware Improper Input ValidationPatch nowKEVEPSS 0.34%Sep 19, 2024
- Unknownmemberhero member_hero Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.44%Sep 19, 2024
- Unknowncozmoslabs profile_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.70%Sep 19, 2024
- Unknowncyberoamworks netgenie_c0101b1-20141120-ng11vo_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.66%Sep 19, 2024
- Unknownmaianscriptworld maian_cart Missing AuthorizationPatch nowKEVEPSS 66.43%Sep 19, 2024
- Unknownstd42 elfinder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 18.93%Sep 19, 2024
- Unknownadvantech r-seenet Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 63.41%Sep 19, 2024
- Unknowncraftcms Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 72.82%Sep 19, 2024
- UnknownAtlassian subversion_application_lifecycle_management Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.20%Sep 19, 2024
- Unknownicewarp mail_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.34%Sep 19, 2024
- Unknown74cms 74cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.94%Sep 19, 2024
- Unknownwavemaker wavemarker_studio Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 27.96%Sep 19, 2024
- UnknownBI Publisher Component of Oracle Fusion Middleware Unauthorized Update, Insert or Delete VulnerabilityPatch nowKEVEPSS 5.24%Sep 19, 2024
- Unknownjsmol2wp_project jsmol2wp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.19%Sep 19, 2024
- Unknownmicrostrategy microstrategy_web Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 7.90%Sep 19, 2024
- UnknownJenkins github Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 90.89%Sep 19, 2024
- UnknownAtlassian oauth Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 71.60%Sep 19, 2024
- Unknowndedecms dedecms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.19%Sep 19, 2024
- Unknownmanageengine servicedesk Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.57%Sep 19, 2024
- Unknowndnnsoftware DotNetNuke (DNN) Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 12.54%Sep 19, 2024
- Unknownsimpel-reserveren_project simpel-reserveren Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.98%Sep 19, 2024
- Unknownumbraco umbraco Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 11.15%Sep 19, 2024
- Unknownhelpdesk_pro_project helpdesk_pro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.51%Sep 19, 2024