Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa…Check if you run itEPSS 0.60%Feb 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan found that ets_class_from_arg() can index an Out-…Check if you run itEPSS 0.62%Feb 10, 2025
- Medium5.3A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.Check if you run itEPSS 1.29%Feb 10, 2025
- Medium5.3A flaw in libtasn1 causes inefficient handling of specific certificate data.Check if you run itEPSS 1.11%Feb 10, 2025
- Medium5.4A flaw was found in npm-serialize-javascript.Check if you run itEPSS 1.12%Feb 10, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- Medium6.1Apple iOS and iPadOS Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.46%Feb 10, 2025
- High8.6Trimble Cityworks Deserialization VulnerabilityPatch nowKEVEPSS 31.09%Feb 6, 2025
- High7.3When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the option, **using zlib 1.2.0.3 or older**, an attacker-controlle…Check if you run itEPSS 1.80%Feb 5, 2025
- High7.0libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.Check if you run itEPSS 1.33%Feb 5, 2025
- Low3.4When asked to use a file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain c…Check if you run itEPSS 0.75%Feb 5, 2025
- High7.5vitest.dev vitest Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.40%Feb 4, 2025
- High7.5Advantive VeraCore SQL Injection VulnerabilityPatch nowKEVEPSS 55.55%Feb 3, 2025
- High8.8Advantive VeraCore Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 32.28%Feb 3, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when…Check if you run itEPSS 0.23%Jan 31, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_d…Check if you run itEPSS 0.45%Jan 31, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in…Check if you run itEPSS 0.24%Jan 31, 2025
- Medium6.6A vulnerability was found in CRI-O.Check if you run itEPSS 0.27%Jan 28, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 22.89%Jan 28, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 20.70%Jan 28, 2025
- Medium4.3Apple Safari/iOS/iPadOS/visionOS/watchOS and macOS Sequoia Interface Spoofing VulnerabilityPatch nowKEVEPSS 0.80%Jan 27, 2025
- Critical10.0Apple Multiple Products Use-After-Free VulnerabilityPatch nowKEVEPSS 17.51%Jan 27, 2025
- High7.07-Zip Mark of the Web Bypass VulnerabilityPatch nowKEVEPSS 67.07%Jan 24, 2025
- Critical9.8SonicWall SMA1000 Appliances Deserialization VulnerabilityPatch nowKEVEPSS 23.43%Jan 22, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explai…Check if you run itEPSS 0.24%Jan 21, 2025
Sort