Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownnetsweeper netsweeper Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.97%Dec 11, 2023
- High7.1An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.Check if you run itEPSS 0.53%Dec 8, 2023
- UnknownApache Tika versions 1.7 to 1.17 Command InjectionPatch nowKEVEPSS 93.55%Dec 5, 2023
- Medium5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.Check if you run itEPSS 1.27%Nov 28, 2023
- Unknownhashicorp consul Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 8.75%Nov 13, 2023
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.89%Oct 27, 2023
- Unknowndreamsecurity magicline_4.0 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.82%Oct 13, 2023
- High7.8POLY1305 MAC implementation corrupts XMM registers on WindowsCheck if you run itEPSS 1.58%Sep 8, 2023
- Critical9.1Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityPatch nowKEVEPSS 25.45%Aug 29, 2023
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.72%Aug 12, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.62%Jun 20, 2023
- Unknownemby emby.releases Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 1.70%May 25, 2023
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.Check if you run itEPSS 1.40%Apr 25, 2023
- Unknownqbittorrent qbittorrent Use of Default CredentialsPatch nowKEVEPSS 1.24%Mar 19, 2023
- High8.2A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, Fort…Open the advisoryMar 7, 2023
- High7.1Fortinet FortiOS Path Traversal VulnerabilityPatch nowKEVEPSS 10.68%Mar 7, 2023
- High7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.Check if you run itEPSS 1.45%Feb 15, 2023
- UnknownPHP PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 96.11%Feb 14, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.Check this weekEPSS 23.51%Feb 8, 2023
- Unknownlb-link bl-lte300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 69.66%Feb 1, 2023
- Unknownninjaforms ninja_forms Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.89%Jan 18, 2023
- UnknownEclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5 Security BypassPatch nowKEVEPSS 99.33%Jan 12, 2023
- High7.3SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and…Check if you run itEPSS 0.45%Dec 12, 2022
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- High7.5An issue was discovered in Python before 3.11.1.Check if you run itEPSS 2.67%Nov 9, 2022