Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityPatch nowKEVEPSS 25.45%Aug 29, 2023
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.72%Aug 12, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.62%Jun 20, 2023
- Unknownemby emby.releases Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 1.70%May 25, 2023
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.Check if you run itEPSS 1.40%Apr 25, 2023
- Unknownqbittorrent qbittorrent Use of Default CredentialsPatch nowKEVEPSS 1.24%Mar 19, 2023
- High7.1Fortinet FortiOS Path Traversal VulnerabilityPatch nowKEVEPSS 10.68%Mar 7, 2023
- High7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.Check if you run itEPSS 1.45%Feb 15, 2023
- UnknownPHP PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 96.11%Feb 14, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.Check this weekEPSS 23.51%Feb 8, 2023
- Unknownlb-link bl-lte300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 69.66%Feb 1, 2023
- Unknownninjaforms ninja_forms Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.89%Jan 18, 2023
- UnknownEclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5 Security BypassPatch nowKEVEPSS 99.33%Jan 12, 2023
- High7.3SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and…Check if you run itEPSS 0.45%Dec 12, 2022
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- High7.5An issue was discovered in Python before 3.11.1.Check if you run itEPSS 2.67%Nov 9, 2022
- High7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.Check this weekEPSS 22.39%Nov 4, 2022
- High8.1curl before 7.86.0 has a double free.Check if you run itEPSS 2.93%Oct 29, 2022
- Medium6.7drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.Check if you run itEPSS 0.35%Oct 26, 2022
- Unknowndreamsecurity magicline4nx.exe Improper Input ValidationPatch nowKEVEPSS 2.43%Oct 24, 2022
- High7.8Cisco SD-WAN Path Traversal VulnerabilityPatch nowKEVEPSS 12.47%Sep 30, 2022
- Critical9.8Teclib GLPI Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.85%Sep 19, 2022
- High7.2Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityPatch nowKEVEPSS 3.29%Sep 13, 2022
- Medium5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.Check if you run itEPSS 3.41%Aug 24, 2022
- UnknownEclipse Jetty ConcatServlet VulnerabilityPatch nowKEVEPSS 78.48%Aug 19, 2022