Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.Check this weekEPSS 22.39%Nov 4, 2022
- High8.1curl before 7.86.0 has a double free.Check if you run itEPSS 2.93%Oct 29, 2022
- Medium6.7drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.Check if you run itEPSS 0.35%Oct 26, 2022
- Unknowndreamsecurity magicline4nx.exe Improper Input ValidationPatch nowKEVEPSS 2.43%Oct 24, 2022
- High7.8Cisco SD-WAN Path Traversal VulnerabilityPatch nowKEVEPSS 12.47%Sep 30, 2022
- Critical9.8Teclib GLPI Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.85%Sep 19, 2022
- High7.2Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityPatch nowKEVEPSS 3.29%Sep 13, 2022
- Medium5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.Check if you run itEPSS 3.41%Aug 24, 2022
- UnknownEclipse Jetty ConcatServlet VulnerabilityPatch nowKEVEPSS 78.48%Aug 19, 2022
- High7.8Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.77%Jul 12, 2022
- Medium5.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.Check if you run itEPSS 8.37%Jul 7, 2022
- Low3.3The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.Check if you run itEPSS 0.44%Jun 5, 2022
- UnknownvSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVEPSS 4.67%May 31, 2022
- High7.5The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries.Check if you run itEPSS 4.58%May 3, 2022
- Medium5.9The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key.Check if you run itEPSS 1.20%May 3, 2022
- High7.5The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.Check this weekEPSS 73.19%Mar 15, 2022
- Medium6.5There's a flaw in urllib's AbstractBasicAuthHandler class.Check if you run itEPSS 4.80%Mar 10, 2022
- High7.5A flaw was found in python.Check this weekEPSS 13.17%Mar 4, 2022
- Unknownapache2 CVE-2019-10097Patch nowKEVEPSS 52.87%Feb 22, 2022
- Unknownapache2 CVE-2019-0190Patch nowKEVEPSS 59.05%Feb 22, 2022
- Unknownapache2 CVE-2018-11763Patch nowKEVEPSS 50.85%Feb 22, 2022
- Critical9.8Apache APISIX Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.07%Feb 11, 2022
- UnknownNovell Client for Windows NICM.SYS Local Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.80%Dec 13, 2021
- UnknownEdgewater Networks Edgemarc HTTP web-management Command ExecutionPatch nowKEVEPSS 46.85%Nov 30, 2021
- UnknownXSS in ammonia via SVG , , and/or tagsOpen the advisoryOct 10, 2021