Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownWP Lab wp-lister_lite_for_amazon Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownwpextended wp_extended Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Jun 27, 2024
- Unknownnetis-systems mw5360_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 70.78%Jun 27, 2024
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 34.52%Jun 26, 2024
- Unknowncoffee_shop_pos_system_project coffee_shop_pos_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.64%Jun 26, 2024
- UnknownCrestron hd-md4x2-4k-e_firmware Improper AuthenticationPatch nowKEVEPSS 75.16%Jun 26, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024
- UnknownProgress MOVEit Transfer SFTP Module Authentication BypassPatch nowKEVEPSS 81.47%Jun 25, 2024
- UnknownPromokit.eu PrestaShop pkfacebook SQL InjectionPatch nowKEVEPSS 10.09%Jun 24, 2024
- UnknownZyxel NAS setCookie Crafted HTTP POST VulnerabilityPatch nowKEVEPSS 86.09%Jun 24, 2024
- Unknownpatton smartnode_sn200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.51%Jun 22, 2024
- Unknownjoommasters jms_blog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 58.74%Jun 22, 2024
- UnknownInstaWP instawp_connect Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.53%Jun 21, 2024
- Medium6.5bplugins html5_video_player Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.62%Jun 20, 2024
- Unknownndkdesign ndk_steppingpack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 49.89%Jun 19, 2024
- Unknownwbce wbce_cms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.15%Jun 19, 2024
- Unknownunimo udr-ja1004_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.70%Jun 19, 2024
- Unknownnsfocusglobal secgate3600_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 8.08%Jun 18, 2024
- Critical9.8Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 22.38%Jun 17, 2024
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 10.07%Jun 16, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityPatch nowKEVEPSS 99.99%Jun 13, 2024
- Unknownethyca fides Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 1.10%Jun 13, 2024
- UnknownFortinet FortiOS and FortiProxy Backup File Weak Key VulnerabilityPatch nowKEVEPSS 3.47%Jun 13, 2024
- UnknownInstaWP Connect - 1-click WP Staging & Migration plugin for WordPress REST API VulnerabilityPatch nowKEVEPSS 4.16%Jun 12, 2024
- High7.8Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 25.22%Jun 11, 2024