Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownphpMyAdmin phpMyAdmin Improper AuthenticationPatch nowKEVEPSS 98.35%Dec 6, 2022
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- Medium5.3Avast Anti Rootkit kernel driver user controlled lengthPatch nowKEVEPSS 0.21%Dec 5, 2022
- High7.8Avast Anti Rootkit kernel driver user controlled lengthPatch nowKEVEPSS 0.18%Dec 5, 2022
- Unknownexternal_media_project external_media Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.77%Dec 5, 2022
- Unknowncozmoslabs user_profile_picture Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.79%Dec 5, 2022
- Unknownwpcentral wpcentral Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 7.36%Dec 5, 2022
- Unknownwebfactoryltd minimal_coming_soon_\&_maintenance_mode Missing AuthorizationPatch nowKEVEPSS 1.95%Dec 5, 2022
- Unknownsupsystic data_tables_generator Incorrect Default PermissionsPatch nowKEVEPSS 1.04%Dec 5, 2022
- UnknownStylemixThemes Motors - Car Dealer & Classified Ads Plugin (WordPress) Insufficient Verification of Data AuthenticityPatch nowKEVEPSS 1.15%Dec 5, 2022
- Unknownuserproplugin userpro Improper AuthenticationPatch nowKEVEPSS 27.37%Dec 5, 2022
- Unknownmailpoet mailpoet_newsletters Improper AuthenticationPatch nowKEVEPSS 60.66%Dec 5, 2022
- High8.8Apple iOS Type Confusion VulnerabilityPatch nowKEVEPSS 8.52%Nov 30, 2022
- UnknownMicrosoft Malware Protection Engine Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.85%Nov 30, 2022
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 47.72%Nov 30, 2022
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 23.51%Nov 29, 2022
- High8.8D-Link DNR-322L Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 33.65%Nov 28, 2022
- UnknownMuffingroup Betheme Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.41%Nov 26, 2022
- UnknownMuffingroup Betheme Incorrect AuthorizationPatch nowKEVEPSS 0.50%Nov 25, 2022
- UnknownWindows Internet Key Exchange (IKE) Protocol Extensions Remote Code ExecutionPatch nowKEVEPSS 76.24%Nov 25, 2022
- UnknownMuffingroup Betheme Access Control VulnerabilityPatch nowKEVEPSS 0.40%Nov 24, 2022
- UnknownSmartRG SR506n and SR510n Ping Host Remote Code ExecutionPatch nowKEVEPSS 34.55%Nov 24, 2022
- High7.8An issue was discovered in libxml2 before 2.10.3.Patch nowKEVEPSS 5.81%Nov 23, 2022
- High7.5An issue was discovered in libxml2 before 2.10.3.Patch nowKEVEPSS 41.37%Nov 23, 2022
- UnknownMuffingroup Betheme Access Control VulnerabilityPatch nowKEVEPSS 0.54%Nov 23, 2022