Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client sid…Check if you run itEPSS 1.08%Aug 26, 2024
- UnknownTOTOLINK EX1800T apcliEncrypType VulnerabilityPatch nowKEVEPSS 3.82%Aug 13, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stress test wi…Check if you run itEPSS 0.29%Jul 29, 2024
- UnknownSamba Samba Out-of-bounds ReadPatch nowKEVEPSS 73.59%Jul 25, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes iattr::ia_size is a loff_t, so these…Check if you run itEPSS 0.65%Jul 16, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type.Check if you run itEPSS 0.63%Jul 16, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb9015280d ("NF…Check if you run itEPSS 0.62%Jul 16, 2024
- Unknownpixelite events_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.31%Jul 1, 2024
- Medium6.7Cisco NX-OS Command Injection VulnerabilityPatch nowKEVEPSS 4.31%Jul 1, 2024
- Critical9.1Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.Check if you run itEPSS 5.58%Jun 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_…Check if you run itEPSS 0.53%Jun 25, 2024
- UnknownFortinet FortiOS and FortiProxy Backup File Weak Key VulnerabilityPatch nowKEVEPSS 3.47%Jun 13, 2024
- UnknownInstaWP Connect - 1-click WP Staging & Migration plugin for WordPress REST API VulnerabilityPatch nowKEVEPSS 4.16%Jun 12, 2024
- Unknowngeneratepress generatepress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Jun 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loop trying to resize local TT If the MTU of one of an attached interfac…Check if you run itEPSS 0.26%May 20, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains pointers t…Check if you run itEPSS 0.26%May 20, 2024
- UnknownApache kafka_connect Deserialization of Untrusted DataPatch nowKEVEPSS 95.81%May 10, 2024
- Unknownlinuxfoundation runc Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')Patch nowKEVEPSS 18.92%May 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with strict in order execution, we co…Check if you run itEPSS 0.27%May 1, 2024
- Medium6.0Cisco ASA and FTD Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.43%Apr 24, 2024
- UnknownImproper Certificate ValidationPatch nowKEVEPSS 0.62%Apr 23, 2024
- UnknownInstaWP Connect 1-click WP Staging & Migration plugin for WordPress Arbitrary File UploadPatch nowKEVEPSS 5.75%Apr 12, 2024
- Medium5.9Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit ce…Check this weekEPSS 52.42%Apr 8, 2024
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.49%Apr 4, 2024
- High7.4Serverpod client accepts any certificateCheck if you run itEPSS 0.28%Mar 28, 2024