Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Apple Multiple Products Improper Certificate Validation VulnerabilityPatch nowKEVEPSS 13.38%Sep 12, 2023
- High7.8Microsoft Streaming Service Proxy Privilege Escalation VulnerabilityPatch nowKEVEPSS 27.91%Sep 12, 2023
- Medium6.5Microsoft Word Information Disclosure VulnerabilityPatch nowKEVEPSS 19.57%Sep 12, 2023
- High7.8Adobe Acrobat and Reader Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 6.75%Sep 12, 2023
- High8.8ASUS RT-AX55 Routers OS Command Injection VulnerabilityPatch nowKEVEPSS 39.51%Sep 11, 2023
- High7.8POLY1305 MAC implementation corrupts XMM registers on WindowsCheck if you run itEPSS 1.58%Sep 8, 2023
- High7.8Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow VulnerabilityPatch nowKEVEPSS 53.40%Sep 7, 2023
- High7.8Apple iOS, iPadOS, and watchOS Wallet Code Execution VulnerabilityPatch nowKEVEPSS 4.41%Sep 7, 2023
- High7.8A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.28%Sep 6, 2023
- High7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.29%Sep 6, 2023
- High7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.41%Sep 6, 2023
- High8.8Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Sep 6, 2023
- Critical9.8Cacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Sep 5, 2023
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 2.64%Sep 5, 2023
- Medium6.5Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c.Check if you run itEPSS 1.08%Aug 29, 2023
- Medium6.5Qlik Sense Path Traversal VulnerabilityPatch nowKEVEPSS 84.84%Aug 29, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 88.22%Aug 29, 2023
- High7.5KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityPatch nowKEVEPSS 1.36%Aug 29, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.12%Aug 29, 2023
- Critical9.1Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityPatch nowKEVEPSS 26.62%Aug 29, 2023
- Critical9.8phpjabbers food_delivery_script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.32%Aug 28, 2023
- Low2.1A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3.Check this weekEPSS 30.68%Aug 26, 2023
- High7.5A use-after-free exists in Python through 3.9 via heappushpop in heapq.Check if you run itEPSS 2.04%Aug 22, 2023
- Critical9.8In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.Check if you run itEPSS 3.46%Aug 22, 2023
- Critical9.8An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726.Check if you run itEPSS 1.35%Aug 22, 2023
Sort