Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWordPress Name Directory Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.26%Aug 26, 2024
- Unknownposimyth the_plus_addons_for_elementor Missing AuthorizationPatch nowKEVEPSS 0.56%Aug 26, 2024
- Unknowntemplateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.96%Aug 24, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Aug 23, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.90%Aug 23, 2024
- High7.2Versa Director Dangerous File Type Upload VulnerabilityPatch nowKEVEPSS 4.01%Aug 22, 2024
- UnknownLiteLLM Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 35.32%Aug 22, 2024
- UnknownOllama Model Path Remote Code Execution VulnerabilityPatch nowKEVEPSS 89.63%Aug 22, 2024
- Critical9.1SolarWinds Web Help Desk Hardcoded Credential VulnerabilityPatch nowKEVEPSS 93.30%Aug 21, 2024
- Critical9.6Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 21.10%Aug 21, 2024
- High8.8Google Chromium V8 Inappropriate Implementation VulnerabilityPatch nowKEVEPSS 18.53%Aug 21, 2024
- UnknownLiteSpeed Cache Plugin Privilege Escalation VulnerabilityPatch nowKEVEPSS 68.27%Aug 21, 2024
- Unknowncanonical ubuntu_linux Incorrect AuthorizationPatch nowKEVEPSS 15.20%Aug 21, 2024
- UnknownApache OFBiz Improper Restricted Pathname Limitation VulnerabilityPatch nowKEVEPSS 87.88%Aug 19, 2024
- UnknownWPExperts mycred Deserialization of Untrusted DataPatch nowKEVEPSS 0.52%Aug 16, 2024
- UnknownWP Lab wp-lister_lite_for_ebay Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.29%Aug 16, 2024
- Unknowncontest-gallery contest_gallery Insertion of Sensitive Information Into Sent DataPatch nowKEVEPSS 1.09%Aug 16, 2024
- Unknownhomebrew jan Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.03%Aug 15, 2024
- UnknownJan API Interface readFileSync VulnerabilityPatch nowKEVEPSS 2.05%Aug 15, 2024
- UnknownHP intelligent_management_center Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 19.06%Aug 15, 2024
- UnknownWordPress WHMpress Plugin Reflected XSS VulnerabilityPatch nowKEVEPSS 0.27%Aug 14, 2024
- UnknownSpring Security OAuth response_type Parameter VulnerabilityPatch nowKEVEPSS 79.18%Aug 14, 2024
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.63%Aug 13, 2024
- Medium6.5Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityPatch nowKEVEPSS 13.63%Aug 13, 2024
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation VulnerabilityPatch nowKEVEPSS 28.74%Aug 13, 2024