Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownaiohttp aiohttp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 76.88%Mar 15, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix RELEASE_LOCKOWNER The test on so_count in nfsd4_release_lockowner() is nonsense and harmful.Check if you run itEPSS 0.20%Mar 13, 2024
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 98.45%Mar 12, 2024
- UnknownGrafana Labs Grafana Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 99.86%Mar 7, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say…Check if you run itEPSS 0.85%Mar 4, 2024
- Critical9.3Kingsoft WPS Office Path Traversal VulnerabilityPatch nowKEVEPSS 2.94%Feb 29, 2024
- UnknownSamba Samba Improper Input ValidationPatch nowKEVEPSS 3.25%Feb 8, 2024
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%Jan 24, 2024
- UnknownZTE mf971r_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 55.71%Jan 22, 2024
- High7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.Check if you run itEPSS 1.39%Jan 16, 2024
- High7.5A vulnerability was found in GnuTLS.Check if you run itEPSS 1.61%Jan 16, 2024
- High8.8Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityPatch nowKEVEPSS 3.19%Jan 16, 2024
- Medium6.5Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CP…Check if you run itEPSS 2.32%Jan 9, 2024
- Unknownphpcollab phpcollab Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 96.39%Jan 4, 2024
- Unknownsitemap_project sitemap Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 11.42%Jan 2, 2024
- UnknownMicrosoft Windows Use of Uninitialized ResourcePatch nowKEVEPSS 10.48%Dec 20, 2023
- UnknownApache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 90.65%Dec 19, 2023
- Medium5.9OpenBSD openssh Improper Validation of Integrity Check ValuePatch nowKEVEPSS 93.55%Dec 18, 2023
- Unknownnetsweeper netsweeper Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.97%Dec 11, 2023
- High7.1An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.Check if you run itEPSS 0.53%Dec 8, 2023
- UnknownApache Tika versions 1.7 to 1.17 Command InjectionPatch nowKEVEPSS 93.55%Dec 5, 2023
- Medium5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.Check if you run itEPSS 1.27%Nov 28, 2023
- Unknownhashicorp consul Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 8.75%Nov 13, 2023
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.89%Oct 27, 2023
- Unknowndreamsecurity magicline_4.0 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.82%Oct 13, 2023