Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit ce…Check this weekEPSS 52.42%Apr 8, 2024
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.49%Apr 4, 2024
- High7.4Serverpod client accepts any certificateCheck if you run itEPSS 0.28%Mar 28, 2024
- Unknownaiohttp aiohttp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 76.88%Mar 15, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix RELEASE_LOCKOWNER The test on so_count in nfsd4_release_lockowner() is nonsense and harmful.Check if you run itEPSS 0.20%Mar 13, 2024
- High8.8A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiCli…Open the advisoryMar 12, 2024
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 98.45%Mar 12, 2024
- UnknownGrafana Labs Grafana Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 99.86%Mar 7, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say…Check if you run itEPSS 0.85%Mar 4, 2024
- Critical9.3Kingsoft WPS Office Path Traversal VulnerabilityPatch nowKEVEPSS 2.94%Feb 29, 2024
- High7.2An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClient…Open the advisoryFeb 15, 2024
- UnknownSamba Samba Improper Input ValidationPatch nowKEVEPSS 3.25%Feb 8, 2024
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%Jan 24, 2024
- UnknownZTE mf971r_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 55.71%Jan 22, 2024
- High7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.Check if you run itEPSS 1.39%Jan 16, 2024
- High7.5A vulnerability was found in GnuTLS.Check if you run itEPSS 1.61%Jan 16, 2024
- High8.8Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityPatch nowKEVEPSS 3.19%Jan 16, 2024
- Medium6.5Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CP…Check if you run itEPSS 2.32%Jan 9, 2024
- Unknownphpcollab phpcollab Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 96.39%Jan 4, 2024
- Unknownsitemap_project sitemap Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 11.42%Jan 2, 2024
- UnknownMicrosoft Windows Use of Uninitialized ResourcePatch nowKEVEPSS 10.48%Dec 20, 2023
- UnknownApache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 90.65%Dec 19, 2023
- Medium5.9OpenBSD openssh Improper Validation of Integrity Check ValuePatch nowKEVEPSS 93.55%Dec 18, 2023
- Unknownnetsweeper netsweeper Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.97%Dec 11, 2023
- High7.1An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.Check if you run itEPSS 0.53%Dec 8, 2023