Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownpython python URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.53%May 6, 2024
- UnknownPHP ZIP Extension _zip_cdir_new Integer OverflowPatch nowKEVEPSS 27.39%May 6, 2024
- UnknownOpenSSL OpenSSL Inadequate Encryption StrengthPatch nowKEVEPSS 95.33%May 6, 2024
- UnknownGoogle Chrome Pepper Plug-in API (PPAPI) PepperInProcessRouter::SendToHost VulnerabilityPatch nowKEVEPSS 1.45%May 6, 2024
- UnknownOracle Java Runtime Environment (JRE), JRockit, Fusion Middleware, and OpenJDK 7 Unspecified Libraries VulnerabilityPatch nowKEVEPSS 6.75%May 6, 2024
- UnknownOracle Java SE 7 Update 17 and earlier Java Runtime Environment (JRE) VulnerabilityPatch nowKEVEPSS 8.77%May 6, 2024
- UnknownOracle Java SE 7 Java Runtime Environment (JRE) JSSE VulnerabilityPatch nowKEVEPSS 45.11%May 6, 2024
- Unknownruijienetworks bcr810w_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 12.29%May 5, 2024
- UnknownLiteSpeed Cache Web Page Generation Cross Site ScriptingPatch nowKEVEPSS 54.87%May 3, 2024
- Medium6.5TP-Link TL-WR841N Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 20.02%May 2, 2024
- UnknownWPEverest User Registration - Custom Registration Form, Login Form, and User Profile WordPress Plugin form_save_action VulnerabilityPatch nowKEVEPSS 0.94%May 2, 2024
- Medium5.3Masteriyo LMS Plugin Authentication BypassPatch nowKEVEPSS 0.94%Apr 30, 2024
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 29.74%Apr 30, 2024
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 41.35%Apr 28, 2024
- UnknownCode Unit4 Financials Cross Site Scripting VulnerabilityPatch nowKEVEPSS 1.79%Apr 27, 2024
- UnknownChatGPT pictureproxy.php Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 40.64%Apr 27, 2024
- Unknownidangero chop_slider Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 95.66%Apr 27, 2024
- Medium5.0CrushFTP CrushFTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 9.41%Apr 26, 2024
- Critical9.8CrushFTP Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.97%Apr 26, 2024
- UnknownFlowmon Operating System Command Injection VulnerabilityPatch nowKEVEPSS 93.04%Apr 26, 2024
- Unknowninfomaniak vod_infomaniak Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.42%Apr 25, 2024
- Unknown8theme XStore Core Deserialization VulnerabilityPatch nowKEVEPSS 0.58%Apr 25, 2024
- UnknownXStore Core Plugin Privilege EscalationPatch nowKEVEPSS 0.57%Apr 25, 2024
- Unknown8theme XStore Core Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.61%Apr 25, 2024
- UnknownAA-Team WZone Reflected Cross-Site-Scripting (XSS)Patch nowKEVEPSS 0.38%Apr 25, 2024