Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache OFBiz Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 96.00%Jan 2, 2024
- Unknownwavlink wn579x3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 6.55%Jan 2, 2024
- Unknownfusion_builder_project fusion_builder Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 71.43%Jan 2, 2024
- Unknownsitemap_project sitemap Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 11.42%Jan 2, 2024
- Unknownxmlsitemapgenerator xml_sitemap_generator Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.07%Jan 2, 2024
- Unknownarticatech artica_proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.97%Jan 2, 2024
- UnknownVR Calendar WordPress plugin through 2.3.2 Arbitrary PHP Function ExecutiuonPatch nowKEVEPSS 17.56%Jan 1, 2024
- Medium6.1In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS.Patch nowKEVEPSS 0.20%Dec 31, 2023
- Unknownteltonika rut900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 70.66%Dec 31, 2023
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.37%Dec 29, 2023
- Medium6.1undsgn uncode Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Dec 28, 2023
- Unknownsahipro sahi_pro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 46.06%Dec 28, 2023
- Unknownwebtoprint web_to_print_shop\ Files or Directories Accessible to External PartiesPatch nowKEVEPSS 7.88%Dec 25, 2023
- Unknownincomcms_project incomcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 71.33%Dec 25, 2023
- Unknownmidasolutions eframework Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 98.24%Dec 25, 2023
- High7.8Spreadsheet::ParseExcel Remote Code Execution VulnerabilityPatch nowKEVEPSS 18.96%Dec 24, 2023
- UnknownBarracuda ESG Appliance ParseExcel Code Execution VulnerabilityPatch nowKEVEPSS 44.57%Dec 24, 2023
- UnknownSolarWinds Serv-U Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.80%Dec 24, 2023
- UnknownHP edgeline_infrastructure_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 68.29%Dec 24, 2023
- Unknownhongdian h8922 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 27.91%Dec 24, 2023
- Unknowndgtl huemagic Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.33%Dec 24, 2023
- Unknownkaswara_project kaswara Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 42.14%Dec 24, 2023
- Unknownpatreon patreon_wordpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.93%Dec 24, 2023
- Unknownadvantech r-seenet Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 69.84%Dec 24, 2023
- UnknownWordPress BuddyBoss Theme Authentication VulnerabilityPatch nowKEVEPSS 0.70%Dec 23, 2023