Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c.Check if you run itEPSS 0.33%Jun 30, 2022
- Medium6.1Nagios Nagios XI URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.11%Jun 29, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Check this weekEPSS 96.39%Jun 21, 2022
- Medium5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclos…Check if you run itEPSS 6.45%Jun 15, 2022
- Medium5.5Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Check if you run itEPSS 6.45%Jun 15, 2022
- Medium5.5Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Check if you run itEPSS 6.87%Jun 15, 2022
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 0.41%Jun 14, 2022
- Low3.3The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.Check if you run itEPSS 0.44%Jun 5, 2022
- High7.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an inc…Check if you run itEPSS 2.91%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.06%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.31%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- High8.8Tenda hg6_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.95%Jun 2, 2022
- Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.Check if you run itEPSS 1.36%Jun 2, 2022
- High7.5libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…Check if you run itEPSS 3.09%Jun 2, 2022
- High7.5libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server…Check if you run itEPSS 2.90%Jun 2, 2022
- High7.5The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host n…Check if you run itEPSS 2.52%Jun 2, 2022
- Medium5.3libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies.Check if you run itEPSS 2.79%Jun 2, 2022
- High8.1A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when is used together with .Check if you run itEPSS 3.81%Jun 2, 2022
- Medium6.5A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but ano…Check if you run itEPSS 4.10%Jun 2, 2022
- High7.5An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…Check if you run itEPSS 3.34%Jun 2, 2022
- Medium5.7An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials wh…Check if you run itEPSS 2.01%Jun 2, 2022
- Medium6.3An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem.Check if you run itEPSS 0.34%Jun 2, 2022
- High7.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.16%May 30, 2022
Sort