Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel.Check if you run itEPSS 1.64%Nov 16, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 47.73%Nov 15, 2023
- Medium6.5A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 al…Check if you run itEPSS 1.36%Nov 14, 2023
- High7.8Microsoft Windows Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 12.09%Nov 14, 2023
- High7.8Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 16.67%Nov 14, 2023
- High7.8Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.95%Nov 14, 2023
- High8.8Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityPatch nowKEVEPSS 88.09%Nov 14, 2023
- Critical9.8SysAid Server Path Traversal VulnerabilityPatch nowKEVEPSS 98.85%Nov 8, 2023
- Medium5.3Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.Check if you run itEPSS 4.46%Nov 6, 2023
- Critical9.8Qualitor qualitor Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 14.31%Nov 6, 2023
- Medium4.3The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code.Check if you run itEPSS 0.32%Nov 3, 2023
- High8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.Check if you run itEPSS 9.62%Nov 1, 2023
- Critical9.8gamipress gamipress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.55%Oct 31, 2023
- Critical9.8Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityPatch nowKEVEPSS 100.00%Oct 31, 2023
- Medium4.7An issue was discovered in the Linux kernel through 6.5.9.Check if you run itEPSS 0.23%Oct 29, 2023
- Critical9.8Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.89%Oct 27, 2023
- High8.8F5 BIG-IP Configuration Utility SQL Injection VulnerabilityPatch nowKEVEPSS 4.47%Oct 26, 2023
- Critical9.8F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.52%Oct 26, 2023
- Critical9.8NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 85.42%Oct 26, 2023
- High7.8A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.91%Oct 25, 2023
- Critical9.8VMware vCenter Server Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 99.21%Oct 25, 2023
- Medium5.4Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 76.90%Oct 18, 2023
- High7.5North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityPatch nowKEVEPSS 4.82%Oct 18, 2023
- Medium6.5SonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 0.97%Oct 17, 2023
- Medium6.5SonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 0.97%Oct 17, 2023
Sort