Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Check if you run itEPSS 0.22%Mar 14, 2023
- High7.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Check if you run itEPSS 0.22%Mar 14, 2023
- High8.8A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2).Check if you run itEPSS 0.63%Mar 14, 2023
- High8.8A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2).Check if you run itEPSS 0.48%Mar 14, 2023
- High7.5A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 = V2.2.0 = V3.1.9 = V3.1.8 = V3.1.9 = V3.1.8 < V3.2.6).Check if you run itEPSS 0.58%Mar 14, 2023
- High8.6Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 97.34%Mar 14, 2023
- Medium4.4Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityPatch nowKEVEPSS 78.00%Mar 14, 2023
- Critical9.8Microsoft Office Outlook Privilege Escalation VulnerabilityPatch nowKEVEPSS 97.16%Mar 14, 2023
- Critical9.8PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.Check if you run itEPSS 0.89%Mar 13, 2023
- High7.5A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft re…Check if you run itEPSS 1.83%Mar 10, 2023
- High7.5Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 80.60%Mar 10, 2023
- High8.2A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, Fort…Check if you run itEPSS 0.22%Mar 7, 2023
- High7.1Fortinet FortiOS Path Traversal VulnerabilityPatch nowKEVEPSS 10.68%Mar 7, 2023
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.47%Mar 6, 2023
- High7.8systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" com…Check if you run itEPSS 1.05%Mar 3, 2023
- Medium5.5In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object.Check if you run itEPSS 0.24%Feb 28, 2023
- Medium5.9GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_…Check if you run itEPSS 1.25%Feb 28, 2023
- Critical9.8Certain Tenda products are vulnerable to command injection.Check if you run itEPSS 2.46%Feb 27, 2023
- High7.1In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.Check if you run itEPSS 0.61%Feb 26, 2023
- High7.5A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations th…Check if you run itEPSS 2.21%Feb 23, 2023
- High7.5A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://n…Check if you run itEPSS 2.02%Feb 23, 2023
- High8.8A prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an attacker to a RCE under the admin account.Check if you run itEPSS 0.98%Feb 23, 2023
- Medium6.5An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server…Check if you run itEPSS 1.74%Feb 23, 2023
- Medium6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs ar…Check if you run itEPSS 0.88%Feb 23, 2023
- Critical9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.Check if you run itEPSS 0.90%Feb 23, 2023
Sort