Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmarketo_ma_project marketo_ma Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.95%Sep 19, 2024
- Unknownimport_legacy_media_project import_legacy_media Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.98%Sep 19, 2024
- UnknownApache Solr Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.26%Sep 19, 2024
- Unknowngecad axigen_free_mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 85.36%Sep 19, 2024
- Unknownbueltge adminimize Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 10.91%Sep 19, 2024
- UnknownAdobe ColdFusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 16.08%Sep 19, 2024
- Unknowndirk_bartley nweb2fax Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 14.04%Sep 19, 2024
- Unknownbitrix24 bitrix_site_manager URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.57%Sep 19, 2024
- Unknownsquirrelmail address_add_plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.44%Sep 19, 2024
- UnknownInvision Board phpinfo.php Information Disclosure VulnerabilityPatch nowKEVEPSS 2.27%Sep 19, 2024
- UnknownTelesquare TLR-2005Ksh Unauthorized Remote Command Execution VulnerabilityPatch nowKEVEPSS 6.35%Sep 18, 2024
- UnknownGradio move_resource_to_block_cache() Method VulnerabilityPatch nowKEVEPSS 9.31%Sep 18, 2024
- UnknownApache Solr Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 83.72%Sep 18, 2024
- UnknownD-Link dar-8000-10_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.69%Sep 18, 2024
- Unknowntelstra arcadyan_lh1000_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 17.95%Sep 18, 2024
- Unknowntongda2000 tongda_office_anywhere Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.30%Sep 18, 2024
- Unknownopenrapid rapidcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 25.24%Sep 18, 2024
- UnknownApache RocketMQ Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 90.43%Sep 18, 2024
- UnknownApache nifi Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.90%Sep 18, 2024
- Unknownnocodb nocodb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 8.88%Sep 18, 2024
- Unknowngibbonedu gibbon Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 47.24%Sep 18, 2024
- Unknownchamilo chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 69.67%Sep 18, 2024
- Unknownjeecg_p3_biz_chat_project jeecg_p3_biz_chat Exposure of Resource to Wrong SpherePatch nowKEVEPSS 4.04%Sep 18, 2024
- UnknownMikroTik RouterOS Winbox or HTTP Interface Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.43%Sep 18, 2024
- Unknownui unifi_network_application Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.88%Sep 18, 2024