| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
.NET JSON.NET Deserialization RCE
|
|
|
High
|
|
Adobe Commerce/Magento "CosmicSting" XXE (CVE-2024-34102)
|
|
|
Critical
|
|
AjaxControlToolkit directory traversal
|
|
|
High
|
|
AjaxPro.NET Professional Deserialization RCE (CVE-2021-23758)
|
|
|
High
|
|
Apache 2.2.14 mod_isapi Dangling Pointer
|
|
|
High
|
|
Apache 2.x version older than 2.2.3
|
|
|
Medium
|
|
Apache HTTP Server Insecure Path Normalization (CVE-2021-41773, CVE-2021-42013)
|
|
|
High
|
|
Apache Log4j2 JNDI Remote Code Execution
|
|
|
Critical
|
|
Apache Log4j2 JNDI Remote Code Execution (404 page handler)
|
|
|
Critical
|
|
Apache Log4j2 JNDI Remote Code Execution (delayed)
|
|
|
Critical
|
|
Apache Log4j2 JNDI Remote Code Execution (per folder)
|
|
|
Critical
|
|
Apache Log4j socket receiver deserialization vulnerability
|
|
|
Critical
|
|
Apache mod_rewrite off-by-one buffer overflow vulnerability
|
|
|
High
|
|
Apache OFBiz Log4Shell RCE
|
|
|
High
|
|
Apache OFBiz RCE (CVE-2024-32113/CVE-2024-36104/CVE-2024-38856)
|
|
|
Critical
|
|
Apache OFBiz RCE (CVE-2024-45195)
|
|
|
Critical
|
|
Apache OFBiz SOAPService Deserialization RCE
|
|
|
High
|
|
Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070)
|
|
|
High
|
|
Apache Shiro Deserialization RCE
|
|
|
High
|
|
Apache Solr Deserialization of untrusted data via jmx.serviceUrl
|
|
|
High
|
|
Apache Solr Log4Shell RCE
|
|
|
High
|
|
Apache Solr SSRF CVE-2017-3164
|
|
|
Medium
|
|
Apache Struts 2 ClassLoader manipulation and denial of service
|
|
|
High
|
|
Apache Struts 2 ClassLoader manipulation and denial of service (S2-020)
|
|
|
High
|
|
Apache Struts2 remote code execution vulnerability
|
|
|
Critical
|
|
Apache Struts2 Remote Command Execution (S2-048)
|
|
|
High
|
|
Apache Struts2 Remote Command Execution (S2-052)
|
|
|
High
|
|
Apache Struts2 Remote Command Execution (S2-053)
|
|
|
Critical
|
|
Apache Struts Path traversal (S2-067/CVE-2024-53677, S2-066/CVE-2023-50164)
|
|
|
Critical
|
|
Apache Struts Remote Code Execution (S2-057)
|
|
|
High
|
|
Apache Tapestry Unauthenticated RCE (CVE-2019-0195, CVE-2021-27850)
|
|
|
High
|
|
Apache Tomcat Remote Code Execution Vulnerability
|
|
|
High
|
|
Apache Unomi MVEL RCE (CVE-2020-13942)
|
|
|
High
|
|
Arbitrary EL Evaluation in RichFaces
|
|
|
High
|
|
Argument Injection
|
|
|
High
|
|
Atlassian Crowd Remote Code Execution
|
|
|
High
|
|
Authentication bypass via MongoDB operator injection
|
|
|
High
|
|
Bash code injection vulnerability
|
|
|
Critical
|
|
BigIP iRule Tcl code injection
|
|
|
High
|
|
Bonita Authorization Bypass (CVE-2022-25237)
|
|
|
High
|
|
Cacti Unauthenticated Command Injection (CVE-2022-46169)
|
|
|
Critical
|
|
CakePHP 1.3.5 / 1.2.8 unserialize() vulnerability
|
|
|
High
|
|
Check for apache versions up to 1.3.25, 2.0.38
|
|
|
High
|
|
Cisco IOS XE Web UI Implant (CVE-2023-20198)
|
|
|
Critical
|
|
Citrix ADC/Gateway Unauthenticated Remote Code Execution
|
|
|
High
|
|
Cmd hijack vulnerability
|
|
|
High
|
|
Code Evaluation (Apache Struts) S2-016
|
|
|
Critical
|
|
Code Evaluation (Apache Struts) S2-045
|
|
|
Critical
|
|
Code Evaluation (Apache Struts) S2-046
|
|
|
High
|
|
Code Evaluation (ASP)
|
|
|
Critical
|
|
Code Evaluation (Perl)
|
|
|
Critical
|
|
Code Evaluation (PHP)
|
|
|
Critical
|
|
Code Evaluation (Python)
|
|
|
Critical
|
|
Code Evaluation (Ruby)
|
|
|
Critical
|
|
Code Execution via WebDav
|
|
|
High
|
|
CodeIgniter weak encryption key
|
|
|
High
|
|
ColdFusion 8 FCKEditor file upload vulnerability
|
|
|
High
|
|
ColdFusion AMF Deserialization RCE
|
|
|
High
|
|
ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360)
|
|
|
High
|
|
ColdFusion FlashGateway Deserialization RCE CVE-2019-7091
|
|
|
High
|
|
ColdFusion JNDI injection RCE
|
|
|
High
|
|
Command Injection
|
|
|
Critical
|
|
Craft CMS RCE (CVE-2023-41892)
|
|
|
Critical
|
|
Craft CMS register_argc_argv RCE (CVE-2024-56145)
|
|
|
Critical
|
|
CrushFTP SSTI (CVE-2024-4040)
|
|
|
Critical
|
|
CyberPanel RCE (CVE-2024-51567/CVE-2024-51568/CVE-2024-51378)
|
|
|
Critical
|
|
D-Link NAS Backdoor Account RCE (CVE-2024-3273, CVE-2024-3272)
|
|
|
Critical
|
|
Database User Has Admin Privileges
|
|
|
High
|
|
Data Binding Expression Vulnerability in Spring Web Flow
|
|
|
High
|
|
DotCMS unrestricted file upload (CVE-2022-26352)
|
|
|
High
|
|
Drupal 7 arbitrary PHP code execution and information disclosure
|
|
|
High
|
|
Drupal Core 4.6.x Arbitrary Code Execution (4.6.0 - 4.6.6)
|
|
|
High
|
|
Drupal Core 4.6.x Arbitrary Code Execution (4.6.0 - 4.6.7)
|
|
|
High
|
|
Drupal Core 4.7.x Arbitrary Code Execution (4.7.0 - 4.7.5)
|
|
|
High
|
|
Drupal Core 4.7.x Arbitrary Code Execution (4.7.0)
|
|
|
High
|
|
Drupal Core 5.x Arbitrary Code Execution (5.0 - 5.2)
|
|
|
High
|
|
Drupal Core 5.x Arbitrary Code Execution (5.0)
|
|
|
High
|
|
Drupal Core 6.x Remote Code Execution (6.0 - 6.38)
|
|
|
High
|
|
Drupal Core 7.x Remote Code Execution (7.0 - 7.57)
|
|
|
High
|
|
Drupal Core 7.x Remote Code Execution (7.0 - 7.58)
|
|
|
High
|
|
Drupal Core 7.x Remote Code Execution (7.0 - 7.73)
|
|
|
High
|
|
Drupal Core 7.x Remote Code Execution (7.0 - 7.74)
|
|
|
High
|
|
Drupal Core 8.4.x Remote Code Execution (8.4.0 - 8.4.5)
|
|
|
High
|
|
Drupal Core 8.4.x Remote Code Execution (8.4.0 - 8.4.7)
|
|
|
High
|
|
Drupal Core 8.5.0 Remote Code Execution (8.5.0)
|
|
|
High
|
|
Drupal Core 8.5.x Remote Code Execution (8.5.0 - 8.5.2)
|
|
|
High
|
|
Drupal Core 8.5.x Remote Code Execution (8.5.0 - 8.5.10)
|
|
|
High
|
|
Drupal Core 8.6.x Remote Code Execution (8.6.0 - 8.6.9)
|
|
|
High
|
|
Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.7)
|
|
|
High
|
|
Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.10)
|
|
|
High
|
|
Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.11)
|
|
|
High
|
|
Drupal Core 8.9.0 Remote Code Execution (8.9.0)
|
|
|
High
|
|
Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.8)
|
|
|
High
|
|
Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.9)
|
|
|
High
|
|
Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.3.8)
|
|
|
High
|
|
Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.4.8)
|
|
|
High
|
|
Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.7.14)
|
|
|
High
|
|
Drupal Core 9.0.0 Remote Code Execution (9.0.0)
|
|
|
High
|
|
Drupal Core 9.0.x Remote Code Execution (9.0.0 - 9.0.7)
|
|
|
High
|
|
Drupal Core 9.0.x Remote Code Execution (9.0.0 - 9.0.8)
|
|
|
High
|
|
Drupal Core 9.3.x Remote Code Execution (9.3.0 - 9.3.18)
|
|
|
High
|
|
Drupal Core 9.4.x Remote Code Execution (9.4.0 - 9.4.2)
|
|
|
High
|
|
Drupal Core Remote Code Execution (8.0.0 - 9.2.21)
|
|
|
High
|
|
Drupal Remote Code Execution (SA-CORE-2018-002)
|
|
|
High
|
|
Drupal Remote Code Execution (SA-CORE-2018-004)
|
|
|
High
|
|
Drupal REST Remote Code Execution
|
|
|
High
|
|
Ektron CMS multiple vulnerabilities
|
|
|
High
|
|
EktronCMS Saxon XSLT parser remote code execution
|
|
|
High
|
|
Ektron CMS unauthenticated code execution and Local File Read
|
|
|
High
|
|
Elasticsearch remote code execution
|
|
|
High
|
|
elFinder RCE (CVE-2021-32682)
|
|
|
High
|
|
F5 BIG-IP Request Smuggling (CVE-2023-46747)
|
|
|
Critical
|
|
F5 BIG-IP Traffic Management User Interface (TMUI) RCE
|
|
|
High
|
|
F5 iControl REST unauthenticated remote command execution vulnerability
|
|
|
High
|
|
FastCGI Unauthorized Access Vulnerability
|
|
|
High
|
|
Flask debug mode
|
|
|
High
|
|
Flex BlazeDS AMF Deserialization RCE
|
|
|
High
|
|
ForgeRock AM / OpenAM Deserialization RCE (CVE-2021-35464)
|
|
|
High
|
|
Fortinet Authentication bypass on administrative interface
|
|
|
High
|
|
Fortinet FortiNAC RCE via arbitrary file upload
|
|
|
High
|
|
Fortinet Out-Of-Bound Memory Write RCE (CVE-2024-21762)
|
|
|
Critical
|
|
Gallery 3.0.4 remote code execution
|
|
|
High
|
|
GeoServer RCE (CVE-2024-36401)
|
|
|
Critical
|
|
GhostScript RCE (Remote Code Execution)
|
|
|
Critical
|
|
GitLab ExifTool RCE (CVE-2021-22205)
|
|
|
High
|
|
GlobalProtect PAN-OS RCE (CVE-2024-3400)
|
|
|
Critical
|
|
GoAhead web server remote code execution
|
|
|
High
|
|
Grafana avatar SSRF
|
|
|
High
|
|
Grav CMS Unauthenticated RCE (CVE-2021-21425)
|
|
|
High
|
|
Hashicorp Consul API is accessible without authentication
|
|
|
Medium
|
|
HipChat for JIRA plugin - Velocity template injection
|
|
|
High
|
|
Horde/IMP Plesk webmail exploit
|
|
|
High
|
|
Horde Imp Unauthenticated Remote Command Execution
|
|
|
High
|
|
Horde remote code execution
|
|
|
High
|
|
HTTP.sys remote code execution vulnerability
|
|
|
High
|
|
IBM ODM JNDI injection (CVE-2024-22319)
|
|
|
Critical
|
|
IBM WebSphere RCE Java Deserialization Vulnerability
|
|
|
High
|
|
ImageMagick remote code execution
|
|
|
High
|
|
Ingress-Nginx "IngressNightmare" RCE (CVE-2025-1974)
|
|
|
Critical
|
|
Invision Power Board version 3.3.4 unserialize PHP code execution
|
|
|
High
|
|
Ivanti CSA Path Traversal (CVE-2024-8963/CVE-2024-8190)
|
|
|
Critical
|
|
Ivanti EPM SQLi RCE (CVE-2024-29824)
|
|
|
High
|
|
Ivanti Sentry Authentication Bypass (CVE-2023-38035)
|
|
|
Critical
|
|
Java Debug Wire Protocol remote code execution
|
|
|
High
|
|
Jboss Application Server HTTPServerILServlet.java remote code execution
|
|
|
High
|
|
JBoss InvokerTransformer Remote Code Execution
|
|
|
High
|
|
JBoss Seam framework remote code execution
|
|
|
High
|
|
Joomla! Core 3.9.x Remote Code Execution (3.9.7 - 3.9.8)
|
|
|
High
|
|
Joomla! Core 3.x.x Remote Code Execution (3.7.0 - 3.8.7)
|
|
|
High
|
|
Joomla! Core Remote Code Execution (1.5.0 - 3.4.5)
|
|
|
High
|
|
Joomla! JCE arbitrary file upload
|
|
|
High
|
|
Joomla! JomSocial remote code execution
|
|
|
High
|
|
Joomla! remote code execution vulnerability
|
|
|
High
|
|
Juniper Junos OS J-Web RCE (CVE-2023-36845/CVE-2023-36846)
|
|
|
Critical
|
|
Kramer VIAware RCE (CVE-2021-36356/CVE-2021-35064)
|
|
|
Critical
|
|
Liferay TunnelServlet Deserialization Remote Code Execution
|
|
|
High
|
|
Liferay version older than 7.0
|
|
|
High
|
|
Liferay version older than 7.1
|
|
|
Medium
|
|
Liferay XMLRPC Blind SSRF
|
|
|
Medium
|
|
Lotus Notes formula injection
|
|
|
High
|
|
Lucee CF_CLIENT_ RCE
|
|
|
Critical
|
|
Lucee Unset Admin Password
|
|
|
Critical
|
|
Magento remote code execution
|
|
|
High
|
|
ManageEngine Desktop Central Deserialization RCE (CVE-2020-10189)
|
|
|
High
|
|
MediaWiki remote code execution
|
|
|
High
|
|
Microsoft Exchange Server Pre-auth Path Confusion vulnerability (CVE-2021-34473)
|
|
|
High
|
|
Microsoft Exchange Server Server-Side Request Forgery (SSRF) vulnerability
|
|
|
High
|
|
Microsoft IIS 6.0 WebDAV Buffer Overflow
|
|
|
High
|
|
Missing Authentication Check in SAP Solution Manager
|
|
|
High
|
|
MobileIron Log4Shell RCE
|
|
|
High
|
|
MobileIron Remote Code Execution via LogService
|
|
|
High
|
|
MoinMoin CVE-2012-6081 multiple arbitrary code execution vulnerabilities
|
|
|
High
|
|
MongoDB $where operator JavaScript injection
|
|
|
High
|
|
MongoDB injection
|
|
|
High
|
|
MovableType remote code execution
|
|
|
High
|
|
Moveable Type 4.x unauthenticated remote command execution
|
|
|
High
|
|
Multiple critical vulnerabilities in Apache Struts2
|
|
|
High
|
|
Multiple vulnerabilities reported in Parallels Plesk Sitebuilder
|
|
|
High
|
|
Mura/Masa CMS JSON API RCE
|
|
|
Critical
|
|
Nagios XI Magpie_debug.php Unauthenticated RCE
|
|
|
High
|
|
Nette framework PHP code injection via callback
|
|
|
High
|
|
Nginx PHP code execution via FastCGI
|
|
|
High
|
|
Nginx stack-based buffer overflow
|
|
|
High
|
|
node-serialize Insecure Deserialization
|
|
|
High
|
|
Node.js Debugger Unauthorized Access Vulnerability
|
|
|
High
|
|
Node.js Inspector Unauthorized Access Vulnerability
|
|
|
High
|
|
OpenX 2.8.10 backdoor
|
|
|
High
|
|
OpenX arbitrary file upload
|
|
|
High
|
|
Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587)
|
|
|
High
|
|
Oracle ADF Faces 'Miracle' RCE (CVE-2022-21445)
|
|
|
High
|
|
Oracle Business Intelligence AMF Deserialization RCE CVE-2020-2950
|
|
|
High
|
|
Oracle E-Business Suite Unauthenticated Remote Code Execution
|
|
|
High
|
|
Oracle Reports rwservlet vulnerabilities
|
|
|
High
|
|
Oracle Sun GlassFish/Java System Application Server Remote Authentication Bypass Vulnerability
|
|
|
High
|
|
Oracle Weblogic Async Component Deserialization RCE CVE-2019-2725
|
|
|
High
|
|
Oracle WebLogic Remote Code Execution (CVE-2020-14882)
|
|
|
Critical
|
|
Oracle WebLogic Remote Code Execution via IIOP
|
|
|
High
|
|
Oracle WebLogic Remote Code Execution via T3
|
|
|
High
|
|
Oracle Weblogic WLS-WSAT Component Deserialization RCE
|
|
|
High
|
|
PaloAlto Networks Expedition RCE (CVE-2024-9463)
|
|
|
Critical
|
|
Palo Alto PAN-OS Management Interface Auth Bypass (CVE-2024-0012/CVE-2024-9474)
|
|
|
Critical
|
|
PAN-OS Management Interface Authentication Bypass (CVE-2025-0108)
|
|
|
Critical
|
|
PHP-CGI remote code execution
|
|
|
High
|
|
PHP4 IMAP module buffer overflow vulnerability
|
|
|
Medium
|
|
PHP4 multiple vulnerabilities
|
|
|
High
|
|
PHP 4.3.0 file disclosure and possible code execution
|
|
|
Medium
|
|
PHP 5.3.9 remote code execution
|
|
|
High
|
|
PHP CGI Argument Injection (CVE-2024-4577)
|
|
|
Critical
|
|
PHP code injection (pmwiki)
|
|
|
High
|
|
PHP curl_exec() url is controlled by user
|
|
|
Medium
|
|
PHP eval() used on user input
|
|
|
Medium
|
|
PHP HTTP POST incorrect MIME header parsing vulnerability
|
|
|
Medium
|
|
phpMoAdmin remote code execution
|
|
|
High
|
|
phpMyAdmin v3.5.2.2 backdoor
|
|
|
High
|
|
PHP object deserialization of user-supplied data
|
|
|
Medium
|
|
PHP preg_replace used on user input
|
|
|
Medium
|
|
phpThumb() fltr[] parameter command injection vulnerability
|
|
|
High
|
|
PHPUnit Remote Code Execution
|
|
|
High
|
|
PHP unserialize() used on user input
|
|
|
Medium
|
|
PHP version older than 4.3.8
|
|
|
Medium
|
|
PHP version older than 5.2.1
|
|
|
High
|
|
PHP version older than 5.2.3
|
|
|
High
|
|
PHP version older than 5.2.5
|
|
|
High
|
|
PHP version older than 5.2.6
|
|
|
High
|
|
Plone arbitrary code execution
|
|
|
High
|
|
PrimeFaces 5.x Expression Language injection
|
|
|
High
|
|
Progress Kemp LoadMaster RCE (CVE-2024-1212)
|
|
|
Critical
|
|
Python Debugger Unauthorized Access Vulnerability
|
|
|
High
|
|
Python object deserialization of user-supplied data
|
|
|
Medium
|
|
Rails remote code execution using render :inline
|
|
|
High
|
|
RCE in Ivanti Connect Secure and Policy Secure (CVE-2024-21887)
|
|
|
Critical
|
|
RCE in SQL Server Reporting Services (SSRS)
|
|
|
High
|
|
RCE with Spring Data Commons
|
|
|
High
|
|
Reflected Cross-Site Scripting (XSS) vulnerability in PAN-OS management web interface
|
|
|
High
|
|
Rejetto HTTP File Server SSTI RCE (CVE-2024-23692)
|
|
|
Critical
|
|
Remote Code Execution (RCE) in Spring Security OAuth
|
|
|
High
|
|
Remote Code Execution (Spring4Shell)
|
|
|
Critical
|
|
Remote code execution in bootstrap-sass 3.2.0.3
|
|
|
High
|
|
Remote code execution of user-provided local names in Rails
|
|
|
High
|
|
Remote code execution vulnerability in WordPress Duplicator
|
|
|
High
|
|
Remote File Inclusion
|
|
|
Critical
|
|
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)
|
|
|
High
|
|
Ruby on Rails directory traversal vulnerability
|
|
|
High
|
|
Ruby on Rails DoubleTap RCE (CVE-2019-5420)
|
|
|
High
|
|
Ruby on Rails weak/known secret token
|
|
|
High
|
|
SAP Hybris Deserialization RCE
|
|
|
High
|
|
SAP NetWeaver ConfigServlet remote command execution
|
|
|
High
|
|
Security update: Hotfix available for ColdFusion
|
|
|
High
|
|
Server-side JavaScript injection
|
|
|
High
|
|
Server-Side Template Injection
|
|
|
Critical
|
|
Sitecore XM/XP Insecure Deserialization (CVE-2025-27218)
|
|
|
Critical
|
|
Sitecore XP Deserialization RCE (CVE-2021-42237)
|
|
|
High
|
|
Sitecore XP TemplateParser RCE (CVE-2023-35813)
|
|
|
Critical
|
|
SonicWall SSL-VPN 8.0.0.0 RCE via ShellShock exploit
|
|
|
High
|
|
Spring Boot Whitelabel Error Page SpEL
|
|
|
High
|
|
Spring Data REST RCE via PATCH requests
|
|
|
High
|
|
Struts 2 development mode
|
|
|
High
|
|
Struts2/XWork remote command execution (S2-014)
|
|
|
High
|
|
Symfony ESI (Edge-Side Includes) enabled
|
|
|
Low
|
|
Symfony RCE via weak/predictable APP_SECRET
|
|
|
High
|
|
Symfony weak application secret
|
|
|
High
|
|
SysAid On-Premise RCE (CVE-2023-47246)
|
|
|
Critical
|
|
Telerik Web UI Insecure Direct Object Reference
|
|
|
High
|
|
Telerik Web UI RadAsyncUpload Deserialization
|
|
|
High
|
|
Telerik Web UI Unrestricted File Upload (CVE-2014-2217)
|
|
|
High
|
|
Telerik Web UI Unrestricted File Upload (CVE-2017-11317)
|
|
|
High
|
|
Text4shell: Apache Commons Text RCE via insecure interpolation
|
|
|
Critical
|
|
ThinkPHP v5.0.22/5.1.29 Remote Code Execution Vulnerability
|
|
|
High
|
|
Tiki Wiki CMS: Arbitrary Code Execution
|
|
|
High
|
|
Tiki Wiki CMS: Remote Code Execution via Calendar Module
|
|
|
High
|
|
timthumb.php remote code execution
|
|
|
High
|
|
TimThumb WebShot remote code execution
|
|
|
High
|
|
TinyMCE ajax_create_folder remote code execution vulnerability
|
|
|
High
|
|
Ubiquiti Unifi Log4Shell RCE
|
|
|
High
|
|
Umbraco CMS remote code execution
|
|
|
High
|
|
Umbraco CMS TemplateService remote code execution
|
|
|
High
|
|
Unauthenticated OGNL injection in Confluence Server and Data Center
|
|
|
High
|
|
Unauthenticated OGNL injection in Confluence Server and Data Center (CVE-2023-22527)
|
|
|
Critical
|
|
Unauthenticated Remote Code Execution via JSONWS in Liferay 6.1 (LPS-88051)
|
|
|
High
|
|
Unauthenticated Remote Code Execution via JSONWS in Liferay 7.2.0 CE GA1
|
|
|
High
|
|
Unauthenticated remote code execution vulnerability in Confluence Server and Data Center
|
|
|
High
|
|
uWSGI Unauthorized Access Vulnerability
|
|
|
High
|
|
vBSEO 3.6.0 PHP code injection
|
|
|
High
|
|
vBulletin 5 CONNECT remote code execution
|
|
|
High
|
|
vBulletin 5.x 0day pre-auth RCE
|
|
|
High
|
|
vBulletin PHP object injection vulnerability
|
|
|
High
|
|
vBulletin Pre-Auth RCE Vulnerability
|
|
|
High
|
|
VMware Aria Operations for Networks RCE (CVE-2023-20887)
|
|
|
Critical
|
|
VMware Horizon Log4Shell RCE
|
|
|
High
|
|
VMware vCenter Log4Shell RCE
|
|
|
High
|
|
VMware vCenter Server Unauthorized Remote Code Execution
|
|
|
High
|
|
VMware Workspace ONE Access SSTI (CVE-2022-22954)
|
|
|
High
|
|
Webmin v1.920 Unauhenticated Remote Command Execution
|
|
|
High
|
|
WooFramework shortcode exploit
|
|
|
High
|
|
WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)
|
|
|
High
|
|
WordPress 2.0.2 Username Remote PHP Code Injection Vulnerability (0.6.2 - 2.0.2)
|
|
|
High
|
|
WordPress 2.1.1 Command Execution Backdoor Vulnerability (2.1.1)
|
|
|
High
|
|
WordPress 2.6.2 Remote Code Execution Vulnerability (0.70 - 2.6.2)
|
|
|
High
|
|
WordPress 5.9.x Shortcode Execution (5.9 - 5.9.6)
|
|
|
High
|
|
WordPress 6.0.x Shortcode Execution (6.0 - 6.0.4)
|
|
|
High
|
|
WordPress 6.1.x Shortcode Execution (6.1 - 6.1.2)
|
|
|
High
|
|
WordPress 6.2.x Shortcode Execution (6.2 - 6.2.1)
|
|
|
High
|
|
WordPress 6.4.x Remote Code Execution (6.4 - 6.4.1)
|
|
|
High
|
|
WordPress caching plugins PHP code execution
|
|
|
High
|
|
WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3)
|
|
|
High
|
|
WordPress OptimizePress unrestricted file upload
|
|
|
High
|
|
WordPress Plugin AccessAlly PHP Code Execution (3.3.1)
|
|
|
High
|
|
WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Remote Code Execution (2.4.21)
|
|
|
High
|
|
WordPress Plugin Advanced Access Manager Arbitrary Code Execution (2.8.2)
|
|
|
High
|
|
WordPress Plugin Ajax Search Lite Remote Command Execution (3.1)
|
|
|
High
|
|
WordPress Plugin All-in-One WP Migration Remote Code Execution (2.0.2)
|
|
|
High
|
|
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Remote Code Execution (4.1.0.1)
|
|
|
High
|
|
WordPress Plugin Analytics Remote Code Execution (1.7)
|
|
|
High
|
|
WordPress Plugin Arigato Autoresponder and Newsletter Remote Code Execution (2.5.1.9)
|
|
|
High
|
|
WordPress Plugin Backup Migration Remote Code Execution (1.3.7)
|
|
|
High
|
|
WordPress Plugin BackWPup Remote and Local Code Execution (1.6.1)
|
|
|
High
|
|
WordPress Plugin Best Seo Remote Code Execution (1.5)
|
|
|
High
|
|
WordPress Plugin BJ Lazy Load Remote Code Execution (0.7.5)
|
|
|
High
|
|
WordPress Plugin Bricks Remote Code Execution (1.9.6)
|
|
|
High
|
|
WordPress Plugin Broadcast Live Video-Live Streaming:HTML5, WebRTC, HLS, RTSP, RTMP Remote Code Execution (5.5.15)
|
|
|
High
|
|
WordPress Plugin Catch Themes Demo Import Remote Code Execution (2.1)
|
|
|
High
|
|
WordPress Plugin CiviCRM Remote Code Execution (5.24.2)
|
|
|
High
|
|
WordPress Plugin CM Download Manager Code Injection (2.0.3)
|
|
|
High
|
|
WordPress Plugin Coming Soon Possible Remote Code Execution (1.1.3)
|
|
|
High
|
|
WordPress Plugin Cool Video Gallery Command Injection (1.9)
|
|
|
High
|
|
WordPress Plugin Custom Content Type Manager Remote Code Execution (0.9.8.5)
|
|
|
High
|
|
WordPress Plugin Divi Builder PHP Code Injection (4.0.9)
|
|
|
High
|
|
WordPress Plugin Duplicator-WordPress Migration Remote Code Execution (1.2.40)
|
|
|
High
|
|
WordPress Plugin Dynamic Content for Elementor Remote Code Execution (1.9.5.6)
|
|
|
High
|
|
WordPress Plugin Easy Forms for Mailchimp PHP Code Injection (6.5.2)
|
|
|
High
|
|
WordPress Plugin eShop Code Injection (6.3.11)
|
|
|
High
|
|
WordPress Plugin EWWW Image Optimizer Remote Code Execution (2.8.3)
|
|
|
High
|
|
WordPress Plugin EZPZ One Click Backup Remote Code Execution (12.03.10)
|
|
|
High
|
|
WordPress Plugin Fast Secure Contact Form Remote Code Execution (4.0.44)
|
|
|
High
|
|
WordPress Plugin Feedify Remote Code Execution (2.0.0)
|
|
|
High
|
|
WordPress Plugin File Gallery Remote Code Execution (1.7.9)
|
|
|
High
|
|
WordPress Plugin File Manager Remote Code Execution (4.5)
|
|
|
High
|
|
WordPress Plugin Five Star Restaurant Menu-WordPress Ordering Remote Code Execution (2.2.0)
|
|
|
High
|
|
WordPress Plugin Flamingo Code Injection (1.1)
|
|
|
High
|
|
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Remote Code Execution (2.05.01)
|
|
|
High
|
|
WordPress Plugin Form Manager Remote Command Execution (1.7.2)
|
|
|
High
|
|
WordPress Plugin Gantry 4 Framework Remote Command Execution (4.1.3)
|
|
|
High
|
|
WordPress Plugin Global Content Blocks PHP Code Execution and Information Disclosure Vulnerabilities (1.5.1)
|
|
|
High
|
|
WordPress Plugin Google Map Remote Code Execution (1.0)
|
|
|
High
|
|
WordPress Plugin Groundhogg-Marketing Automation & CRM for WordPress Remote Code Execution (1.3.4)
|
|
|
High
|
|
WordPress Plugin Gutenberg Block Editor Toolkit-EditorsKit Remote Code Execution (1.31.5)
|
|
|
High
|
|
WordPress Plugin Import XML and RSS Feeds Remote Code Execution (2.1.4)
|
|
|
High
|
|
WordPress Plugin Include Me Remote Code Execution (1.2.1)
|
|
|
High
|
|
WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (4.2997)
|
|
|
High
|
|
WordPress Plugin is_human() 'type' Parameter Remote Command Injection (1.4.2)
|
|
|
High
|
|
WordPress Plugin iThemes Exchange:Simple WP Ecommerce Remote Code Execution (1.14.0)
|
|
|
High
|
|
WordPress Plugin Jekyll Exporter Remote Code Execution (2.2.0)
|
|
|
High
|
|
WordPress Plugin Kanzu Support Desk-WordPress Helpdesk Remote Code Execution (2.4.6)
|
|
|
High
|
|
WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24)
|
|
|
High
|
|
WordPress Plugin Loco Translate PHP Code Injection (2.5.3)
|
|
|
High
|
|
WordPress Plugin MailPress Remote Code Execution (7.0.2)
|
|
|
High
|
|
WordPress Plugin Maintenance Mode Under Construction Page Landing Page Possible Remote Code Execution (1.0.9)
|
|
|
High
|
|
WordPress Plugin Master Popups Remote Code Execution (1.0.0)
|
|
|
High
|
|
WordPress Plugin MobiLoud-WordPress Mobile Apps-Convert your WordPress Website to Native Mobile Apps Remote Code Execution (4.0.1)
|
|
|
High
|
|
WordPress Plugin Newsletter Subscription Form Possible Remote Code Execution (1.1.2)
|
|
|
High
|
|
WordPress Plugin NextGEN Gallery-WordPress Gallery Remote Code Execution (2.1.59)
|
|
|
High
|
|
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress PHP Code Injection (3.6.10)
|
|
|
High
|
|
WordPress Plugin open-flash-chart-core Remote Code Execution (0.4)
|
|
|
High
|
|
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Remote Code Execution (2.0.14)
|
|
|
High
|
|
WordPress Plugin PHP Everywhere Multiple Remote Code Execution Vulnerabilities (2.0.3)
|
|
|
High
|
|
WordPress Plugin PHP Speedy 'admin_container.php' Remote PHP Code Execution (0.5.2)
|
|
|
High
|
|
WordPress Plugin Plainview Activity Monitor Remote Command Execution (20161228)
|
|
|
High
|
|
WordPress Plugin Product Lister for Walmart Remote Code Execution (1.0.1)
|
|
|
High
|
|
WordPress Plugin Product Table by WBW Remote Code Execution (2.0.1)
|
|
|
High
|
|
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Remote Code Execution (2.8.5)
|
|
|
High
|
|
WordPress Plugin PropertyHive Remote Code Execution (1.4.25)
|
|
|
High
|
|
WordPress Plugin Secure File Manager Remote Code Execution (2.8.1)
|
|
|
High
|
|
WordPress Plugin Share Possible Remote Code Execution (1.0)
|
|
|
High
|
|
WordPress Plugin Similar Posts-Best Related Posts for WordPress Remote Code Execution (3.1.5)
|
|
|
High
|
|
WordPress Plugin Social Media Tab Remote Code Execution (1.0.9)
|
|
|
High
|
|
WordPress Plugin Social Photo Gallery Remote Code Execution (1.0)
|
|
|
High
|
|
WordPress Plugin Statistics Remote Code Execution (1.8)
|
|
|
High
|
|
WordPress Plugin Subscribe Form Remote Command Execution (1.1)
|
|
|
High
|
|
WordPress Plugin ThemeREX Addons Remote Code Execution (All)
|
|
|
High
|
|
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Remote Code Execution (2.0.32)
|
|
|
High
|
|
WordPress Plugin UnGallery 'search' Parameter Remote Arbitrary Command Execution (2.1.5)
|
|
|
High
|
|
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Remote Code Execution (1.5.89)
|
|
|
High
|
|
WordPress Plugin VaultPress Man-in-The-Middle (MiTM) Remote Code Execution (1.8.6)
|
|
|
High
|
|
WordPress Plugin VaultPress Remote Code Execution (1.9.0)
|
|
|
High
|
|
WordPress Plugin Video Embed & Thumbnail Generator 'kg_callffmpeg.php' Multiple Remote Code Execution Vulnerabilities (1.1)
|
|
|
High
|
|
WordPress Plugin W3 Total Cache PHP Code Injection (0.9.2.8)
|
|
|
High
|
|
WordPress Plugin WishList Member X Remote Code Execution (3.25.1)
|
|
|
High
|
|
WordPress Plugin WooCommerce Possible Remote Code Execution (3.4.5)
|
|
|
High
|
|
WordPress Plugin WooCommerce Possible Remote Code Execution (3.5.0)
|
|
|
High
|
|
WordPress Plugin WooCommerce Remote Code Execution (4.0.1)
|
|
|
High
|
|
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads PHP Code Injection (1.3)
|
|
|
High
|
|
WordPress Plugin WordPress Download Manager Remote Code Execution (2.7.4)
|
|
|
High
|
|
WordPress Plugin WordPress Landing Pages Remote Code Execution (1.9.0)
|
|
|
High
|
|
WordPress Plugin WordPress Mega Menu-QuadMenu Remote Code Execution (2.0.6)
|
|
|
High
|
|
WordPress Plugin WordPress PDF Light Viewer Command Injection (1.4.11)
|
|
|
High
|
|
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Remote Code Execution (5.0.0)
|
|
|
High
|
|
WordPress Plugin WordPress WP-Advanced-Search Remote Code Execution (3.3.3)
|
|
|
High
|
|
WordPress Plugin WP-Filebase Download Manager Remote Code Execution (0.3.0.03)
|
|
|
High
|
|
WordPress Plugin WP-Live Chat by 3CX Remote Code Execution (7.0.01)
|
|
|
High
|
|
WordPress Plugin WP-Stateless-Google Cloud Storage Remote Code Execution (2.2.0)
|
|
|
High
|
|
WordPress Plugin WP-Syntax Remote PHP Code Execution (0.9.9)
|
|
|
High
|
|
WordPress Plugin WP E-Signature Remote Code Execution (1.5.6.5)
|
|
|
High
|
|
WordPress Plugin wp heyloyalty Remote Code Execution (1.1.4)
|
|
|
High
|
|
WordPress Plugin WP Hotel Booking Remote Code Execution (1.10.2)
|
|
|
High
|
|
WordPress Plugin WP Maintenance Mode Remote Code Execution (2.0.6)
|
|
|
High
|
|
WordPress Plugin WP Super Cache PHP Code Injection (1.2)
|
|
|
High
|
|
WordPress Plugin WP Super Cache Remote Code Execution (1.7.1)
|
|
|
High
|
|
WordPress Plugin wSecure Lite Remote Code Execution (2.3)
|
|
|
High
|
|
WordPress Plugin Yoast SEO Possible Remote Code Execution (9.1.0)
|
|
|
High
|
|
WordPress Plugin Zingiri Web Shop 'ajax_save_name.php' Remote Code Execution (2.2.3)
|
|
|
High
|
|
WordPress Super Socialat backdoor plugin
|
|
|
High
|
|
Xdebug remote code execution via xdebug.remote_connect_back
|
|
|
High
|
|
Array
|
|
|
|
