Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2022-42458 | ShiftTech Inc.bingo!CMS | Missing Authorization in bingo!CMS | CWE-862 | — | |
| CVE-2022-3180 | WPGatewayWPGateway | Improper Authorization in WPGateway | CWE-285 | — | |
| CVE-2022-31474 | iThemesBackupBuddy | Improper Authorization in BackupBuddy | CWE-285 | — | |
| CVE-2022-4980 | General BytesCrypto Application Server (CAS) | Improper access control in Crypto Application Server (CAS) | CWE-284 | — | |
| CVE-2021-45461 | FreePBXPhone Apps | Input validation error in Phone Apps | CWE-20 | — | |
| #VU58226 | FatPipe Networks Inc.IPVPN, MPVPN, WARP | Arbitrary file upload in FatPipe Networks Inc. products | CWE-434 | — | |
| #VU57645 | EntroLinkPPX-AnyLink 6004, PPX-AnyLink 6006, PPX-AnyLink 6900, PPX-AnyLink 6900F, PPX-AnyLink 6904, PPX-AnyLink 8000 | Code Injection in EntroLink products | CWE-94 | — | |
| CVE-2021-32789 | WooCommerceWooCommerce | SQL injection in WooCommerce Blocks and WooCommerce | CWE-89 | — | |
| CVE-2021-35941 | Western DigitalWD My Book Live, WD My Book Live Duo | Improper access control in WD My Book Live and WD My Book Live Duo | CWE-284 | — | |
| CVE-2021-24370 | radykalFancy Product Designer | Arbitrary file upload in Fancy Product Designer | CWE-434 | — | |
| CVE-2021-24175 | Posimyth ThemesThe Plus Addons for Elementor Page Builder | Improper Authentication in The Plus Addons for Elementor Page Builder | CWE-287 | — | |
| #VU51219 | Super Micro Computer, Inc.X10SL7-F, X10SLA-F, X10SLH-F, X10SLL-F, X10SLL-S/-SF, X10SLL+-F, X10SLM-F, X10SLM+-F, X10SLM+-LN4F | Security restrictions bypass in Super Micro Computer, Inc. products | CWE-264 | — | |
| #VU48956 | Unknown | Embedded malicious code (backdoor) in Orion Platform | CWE-506 | — | |
| #VU48952 | wpecommerce, alexanderfoxcEasy WP SMTP | Improper access control in Easy WP SMTP | CWE-284 | — | |
| #VU27929 | XootiXLogin/Signup Popup ( Inline Form + Woocommerce ) | Stored cross-site scripting in Login/Signup Popup ( Inline Form + Woocommerce ) | CWE-79 | — | |
| #VU27672 | ElementorElementor Pro | Arbitrary file upload in Elementor Pro | CWE-434 | — | |
| #VU27193 | Apple Inc.Apple iOS | Out-of-bounds write in Apple iOS | CWE-787 | — | |
| #VU26285 | Merit LILIN Ent. Co., Ltd.DHD204, DHD204A, DHD208, DHD208A, DHD216, DHD216A, DHD304A, DHD308A, DHD316A, DHD504A, DHD508A, DHD516A | Use of hard-coded credentials in Merit LILIN Ent. Co., Ltd. products | CWE-798 | — | |
| #VU25822 | Unknown | Improper access control in Custom Searchable Data Entry System | CWE-284 | — | |
| #VU25677 | Unknown | Stored cross-site scripting in Async JavaScript | CWE-79 | — |
Showing 61–80 of 325 results