Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownthinkadmin thinkadmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.33%Jul 21, 2024
- Unknownatarim atarim Missing AuthorizationPatch nowKEVEPSS 0.44%Jul 19, 2024
- Unknownkeydatas keydatas Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 35.46%Jul 17, 2024
- High7.5Oracle WebLogic Server Unspecified VulnerabilityPatch nowKEVEPSS 74.16%Jul 16, 2024
- UnknownZemana AntiLogger Arbitrary Process Termination VulnerabilityPatch nowKEVEPSS 0.20%Jul 16, 2024
- UnknownOSGeo GeoServer Improper Input ValidationPatch nowKEVEPSS 1.56%Jul 16, 2024
- Unknownavertx hd838_firmware Observable DiscrepancyPatch nowKEVEPSS 1.38%Jul 16, 2024
- UnknownCitrix NetScaler ADC and NetScaler Gateway Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.85%Jul 16, 2024
- UnknownUnauthenticated Privilege Escalation in Profile-Builder pluginPatch nowKEVEPSS 0.80%Jul 15, 2024
- UnknownThinkPHP '_filename' in index.php Remote Code ExecutionPatch nowKEVEPSS 2.02%Jul 15, 2024
- UnknownWP Time Capsule Revmakx Backup and Staging Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.53%Jul 13, 2024
- Unknownavecnous event_post Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.52%Jul 11, 2024
- Unknownukrsolution barcode_scanner_and_inventory_manager Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Jul 11, 2024
- UnknownHasThemes HT Mega Path Traversal: '.../...//'Patch nowKEVEPSS 0.70%Jul 11, 2024
- Critical9.3Palo Alto Networks Expedition Missing Authentication VulnerabilityPatch nowKEVEPSS 91.68%Jul 10, 2024
- Critical9.2ServiceNow Incomplete List of Disallowed Inputs VulnerabilityPatch nowKEVEPSS 99.63%Jul 10, 2024
- Critical9.3ServiceNow Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.98%Jul 10, 2024
- UnknownYITH WooCommerce Ajax Product Filter Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.30%Jul 10, 2024
- High7.2Microsoft SharePoint Deserialization VulnerabilityPatch nowKEVEPSS 50.89%Jul 9, 2024
- Unknownpdoc API Documentation for Python Projects 'pdoc --math' VulnerabilityPatch nowKEVEPSS 3.83%Jul 9, 2024
- High7.5Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 84.23%Jul 9, 2024
- High7.8Microsoft Windows Hyper-V Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.12%Jul 9, 2024
- UnknownUser Activity Log Pro Plugin Broken Access ControlPatch nowKEVEPSS 0.35%Jul 9, 2024
- UnknownWP User Switch Plugin Privilege EscalationPatch nowKEVEPSS 0.37%Jul 9, 2024
- High7.0A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).Patch nowKEVEPSS 27.93%Jul 8, 2024