Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| #VU25676 | Unknown | Stored cross-site scripting in 10Web Google Maps - Google Maps builder Plugin | CWE-79 | — | |
| #VU25675 | Unknown | Stored cross-site scripting in Modern Events Calendar Lite | CWE-79 | — | |
| #VU25627 | Unknown | Improper access control in Flexible Checkout Fields for WooCommerce | CWE-284 | — | |
| CVE-2019-2729 | OracleOracle WebLogic Server | Deserialization of Untrusted Data in Oracle WebLogic Server | CWE-502 | — | |
| #VU18244 | Lenin ZapataRelated Posts | Improper access control in Related Posts | CWE-284 | — | |
| CVE-2019-25141 | wpecommerce, alexanderfoxcEasy WP SMTP | Deserialization of Untrusted Data in Easy WP SMTP | CWE-502 | — | |
| CVE-2019-7816 | AdobeColdFusion | Dangerous file upload in ColdFusion | CWE-434 | — | |
| #VU17879 | GoogleGoogle Chrome | Exposed dangerous method or function in Google Chromium | — | — | |
| CVE-2018-18956 | GNUSuricata | Segmentation fault in Suricata | CWE-20 | — | |
| CVE-2018-15454 | Cisco Systems, IncCisco ASA 5500-X Series | Input validation error in Cisco Systems, Inc products | CWE-20 | — | |
| #VU15547 | MicrosoftMicrosoft Word | Logic error in Microsoft Office and Microsoft Word | CWE-20 | — | |
| CVE-2018-9206 | blueimpjQuery File Upload | Arbitrary file upload in jQuery File Upload | CWE-434 | — | |
| CVE-2018-19207 | WordPress.ORGWP GDPR Compliance | Privilege escalation in WP GDPR Compliance | CWE-264 | — | |
| #VU15447 | Vesta Control PanelVesta Control Panel | Backdoor in Vesta Control Panel | CWE-912 | — | |
| #VU14684 | Apple Inc.Apple Safari | Spoofing attack in Apple Safari | CWE-451 | — | |
| #VU13091 | SamsungSamsung SDS Acube ActiveX Control | Improper input validation in Samsung SDS Acube ActiveX Control | CWE-20 | — | |
| #VU12851 | DrayTek Corp.DrayTek firmware | Cross-site request forgery in Vigor 2832 and Vigor 2860 | CWE-352 | — | |
| CVE-2018-10657 | Matrix.orgSynapse | Improper input validation in Synapse | CWE-20 | — | |
| CVE-2018-10468 | Useless Ethereum TokenUseless Ethereum Token | Integer overflow in Useless Ethereum Token | CWE-190 | — | |
| CVE-2018-10376 | SmartMesh Foundation Pte. Ltd.SmartMesh ERC20 token | Integer overflow in SmartMesh ERC20 token | CWE-190 | — |
Showing 81–100 of 325 results