Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.EPSS 1.4%Apr 25, 2023
- High8.8Arbitrary command injection in embano1/wipEPSS 3.7%Apr 24, 2023
- High7.5dio vulnerable to CRLF injection with HTTP method stringEPSS 1.2%Mar 21, 2023
- High8.8github-slug-action vulnerable to arbitrary code executionEPSS 1.6%Mar 13, 2023
- Low3.0Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lowerEPSS 0.4%Mar 7, 2023
- Medium6.8git2-rs fails to verify SSH keys by defaultEPSS 0.6%Jan 20, 2023
- LowDuplicate of GHSA-4xh4-v2pq-jvhmJan 11, 2023
- High8.8There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execu…EPSS 2.5%Nov 23, 2022
- Medium6.5There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.EPSS 0.5%Nov 23, 2022
- Critical9.8gajira-create GitHub action vulnerable to arbitrary code executionEPSS 2.9%Oct 7, 2022
- Lowpersonnummer/dart vulnerable to Improper Input ValidationEPSS 0.5%Sep 19, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.EPSS 31.5%Jul 7, 2022
- High7.5Grafana Path Traversal VulnerabilityKEVEPSS 88.5%Dec 7, 2021
- Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityKEVEPSS 99.7%Apr 23, 2021
- Critical9.8Apache Airflow's Experimental API Authentication BypassKEVEPSS 99.8%Nov 10, 2020
290 records · page 12 of 12
PreviousNext