Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8IBM Aspera Faspex Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Feb 13, 2023
- High7.5A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to tak…Check if you run itEPSS 1.05%Feb 9, 2023
- High7.5A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1.Check if you run itEPSS 1.71%Feb 9, 2023
- High7.5A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header.Check if you run itEPSS 2.28%Feb 9, 2023
- High8.8A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments.Check if you run itEPSS 2.15%Feb 9, 2023
- High7.5A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1.Check if you run itEPSS 1.70%Feb 9, 2023
- High7.5A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1.Check if you run itEPSS 1.26%Feb 9, 2023
- Medium5.9A use after free vulnerability exists in curl <7.87.0.Check if you run itEPSS 2.71%Feb 9, 2023
- High7.4There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.Check this weekEPSS 69.29%Feb 8, 2023
- High7.5The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.Check if you run itEPSS 5.02%Feb 8, 2023
- High7.5The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.Check this weekEPSS 28.59%Feb 8, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.Check this weekEPSS 23.51%Feb 8, 2023
- Critical9.8A vulnerability was found in GNU C Library 2.38.Check if you run itEPSS 1.09%Feb 6, 2023
- High7.2Fortra GoAnywhere MFT Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Feb 6, 2023
- High7.5In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.Check if you run itEPSS 0.93%Feb 3, 2023
- Critical9.8sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size.Check if you run itEPSS 1.50%Feb 3, 2023
- Medium6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.Check this weekEPSS 89.79%Feb 3, 2023
- High7.0Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 3.67%Jan 30, 2023
- Medium5.5GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.Check if you run itEPSS 1.49%Jan 30, 2023
- High7.8An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks.Check if you run itEPSS 0.26%Jan 27, 2023
- High7.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 1.39%Jan 23, 2023
- Critical9.8Ruckus AP Boot Image VulnerabilityPatch nowKEVEPSS 0.51%Jan 20, 2023
- Critical9.8Ruckus AP Unauthorized Image Signature VulnerabilityPatch nowKEVEPSS 0.55%Jan 20, 2023
- High7.8Adobe Acrobat and Reader Use-After-Free VulnerabilityPatch nowKEVEPSS 59.43%Jan 18, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.75%Jan 18, 2023
Sort