Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.56%Oct 22, 2026
- High8.8Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.25%Oct 22, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.39%Oct 22, 2026
- Medium5.1Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imageProxy.Patch nowKEVEPSS 0.20%Oct 22, 2026
- High8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.27%Oct 22, 2026
- Medium5.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Oct 22, 2026
- High7.1pentasecurity wapples Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.37%Oct 22, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.39%Oct 22, 2026
- High8.8PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter.Patch nowKEVEPSS 0.26%Oct 22, 2026
- High8.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.79%Oct 22, 2026
- High8.8WPDeveloper notificationx Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Oct 22, 2026
- High8.7OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the style_name parameter of the theme operation.Patch nowKEVEPSS 0.43%Oct 22, 2026
- Critical9.3DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included.Patch nowKEVEPSS 0.44%Oct 22, 2026
- High8.7JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter.Patch nowKEVEPSS 0.56%Oct 22, 2026
- Critical9.3FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary files via tPatch nowKEVEPSS 1.67%Oct 22, 2026
- High8.7Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.74%Oct 22, 2026
- Medium5.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Oct 22, 2026
- High8.7WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php.Patch nowKEVEPSS 0.45%Oct 22, 2026
- High8.8seacms seacms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Oct 22, 2026
- High8.7MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter.Patch nowKEVEPSS 0.47%Oct 22, 2026
- High8.7intermesh group-office Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.54%Oct 22, 2026
- Medium5.1discourse discourse Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Oct 22, 2026
- High7.7Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.76%Oct 22, 2026
- Medium5.1QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter.Patch nowKEVEPSS 0.26%Oct 22, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.45%Oct 22, 2026
Sort