Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Fortinet FortiOS Out-of-Bound Write VulnerabilityPatch nowKEVEPSS 84.59%Feb 8, 2024
- Medium5.5A flaw was found in the GNU coreutils "split" program.Check if you run itEPSS 0.49%Feb 6, 2024
- Medium5.5linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.Check if you run itEPSS 0.46%Feb 6, 2024
- Critical9.8exrick xmall Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.35%Feb 6, 2024
- High7.5A flaw was found in m2crypto.Check if you run itEPSS 1.12%Feb 5, 2024
- Medium4.8A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function.Check if you run itEPSS 0.71%Feb 5, 2024
- Medium5.3A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function.Check if you run itEPSS 0.33%Feb 5, 2024
- Medium6.8A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function.Check if you run itEPSS 0.32%Feb 5, 2024
- Medium5.5libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.Check if you run itEPSS 0.39%Feb 4, 2024
- High7.5libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buff…Check if you run itEPSS 2.15%Feb 4, 2024
- High7.5An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5.Check if you run itEPSS 1.31%Feb 4, 2024
- Medium6.1eyoucms eyoucms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.02%Feb 1, 2024
- High7.8Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 28.06%Jan 31, 2024
- Medium5.5Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications lo…Check if you run itEPSS 3.19%Jan 26, 2024
- High7.8Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.Check if you run itEPSS 0.58%Jan 25, 2024
- Medium5.5NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers.Check if you run itEPSS 0.61%Jan 25, 2024
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%Jan 24, 2024
- Medium5.5In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.Check if you run itEPSS 0.25%Jan 23, 2024
- High8.8Apple Multiple Products WebKit Type Confusion VulnerabilityPatch nowKEVEPSS 10.59%Jan 22, 2024
- Critical9.8D-Link DIR-859 Router Path Traversal VulnerabilityPatch nowKEVEPSS 82.71%Jan 21, 2024
- High7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust.Check if you run itEPSS 1.39%Jan 16, 2024
- Medium5.5A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c.Check if you run itEPSS 0.38%Jan 16, 2024
- High7.5A vulnerability was found in GnuTLS.Check if you run itEPSS 1.61%Jan 16, 2024
- High7.5Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityPatch nowKEVEPSS 57.63%Jan 16, 2024
- High8.8Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityPatch nowKEVEPSS 3.19%Jan 16, 2024
Sort