Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5vanquish woocommerce_customers_manager Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.32%Apr 24, 2024
- UnknownValvePress Automatic SQL InjectionPatch nowKEVEPSS 94.06%Apr 24, 2024
- Medium6.0Cisco ASA and FTD Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.43%Apr 24, 2024
- High8.6Cisco ASA and FTD Denial of Service VulnerabilityPatch nowKEVEPSS 70.69%Apr 24, 2024
- Critical9.8SonicWall SonicOS Improper Access Control VulnerabilityPatch nowKEVEPSS 18.38%Apr 23, 2024
- Critical9.8Veeam Backup and Replication Deserialization VulnerabilityPatch nowKEVEPSS 90.37%Apr 23, 2024
- High7.2VMware ESXi Authentication Bypass VulnerabilityPatch nowKEVEPSS 26.77%Apr 23, 2024
- Unknownsirv sirv Incorrect Privilege AssignmentPatch nowKEVEPSS 0.43%Apr 23, 2024
- UnknownImproper Certificate ValidationPatch nowKEVEPSS 0.62%Apr 23, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityPatch nowKEVEPSS 99.21%Apr 22, 2024
- UnknownWordPress WP-Lister Lite for eBay Plugin Arbitrary File UploadPatch nowKEVEPSS 0.79%Apr 22, 2024
- Critical9.8Login with Phone Number Plugin Missing Authorization VulnerabilityPatch nowKEVEPSS 0.36%Apr 22, 2024
- UnknownShortPixel Critical CSS Plugin Broken Access ControlPatch nowKEVEPSS 0.43%Apr 22, 2024
- UnknownContest Gallery Plugin Arbitrary File DeletionPatch nowKEVEPSS 0.61%Apr 22, 2024
- UnknownmyCred Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.34%Apr 22, 2024
- UnknownARForms Plugin SQL InjectionPatch nowKEVEPSS 0.56%Apr 22, 2024
- Unknownreputeinfosystems arforms Missing AuthorizationPatch nowKEVEPSS 0.38%Apr 22, 2024
- Unknownreputeinfosystems arforms Missing AuthorizationPatch nowKEVEPSS 0.34%Apr 22, 2024
- Unknownreputeinfosystems arforms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.58%Apr 22, 2024
- UnknownARForms Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.35%Apr 22, 2024
- UnknownTBK DVR Command Injection VulnerabilityPatch nowKEVEPSS 86.49%Apr 21, 2024
- Unknownphpshe phpshe Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.04%Apr 21, 2024
- UnknownWooCommerce woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.26%Apr 20, 2024
- Critical10.0CrushFTP VFS Sandbox Escape VulnerabilityPatch nowKEVEPSS 99.54%Apr 19, 2024
- Unknownnextgen mirth_connect Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 99.43%Apr 19, 2024