Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.Check if you run itEPSS 5.12%Feb 26, 2022
- High8.8In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.Check if you run itEPSS 4.12%Feb 24, 2022
- High8.8WatchGuard Firebox and XTM Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.80%Feb 24, 2022
- Medium5.5A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support.Check if you run itEPSS 0.43%Feb 21, 2022
- High7.1An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel.Check if you run itEPSS 0.34%Feb 18, 2022
- Critical10.0Debian-specific Redis Server Lua Sandbox Escape VulnerabilityPatch nowKEVEPSS 99.35%Feb 18, 2022
- Critical9.8In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.Check if you run itEPSS 4.82%Feb 18, 2022
- High7.5In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.Check if you run itEPSS 4.82%Feb 18, 2022
- Medium6.5In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.Check if you run itEPSS 3.29%Feb 18, 2022
- Medium6.5updraftplus updraftplus Incorrect AuthorizationPatch nowKEVEPSS 2.07%Feb 17, 2022
- Critical9.8mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.41%Feb 17, 2022
- Critical9.8D-Link Multiple Routers Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.84%Feb 17, 2022
- High7.8Red Hat Polkit Incorrect Authorization VulnerabilityPatch nowKEVEPSS 23.71%Feb 16, 2022
- Critical9.8xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.Check this weekEPSS 35.27%Feb 16, 2022
- Critical9.8xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.Check if you run itEPSS 4.96%Feb 16, 2022
- Medium5.5In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.Check if you run itEPSS 1.48%Feb 14, 2022
- Medium6.1noptin noptin URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.30%Feb 14, 2022
- Critical9.8Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.20%Feb 14, 2022
- High8.4Linux Kernel Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 25.15%Feb 11, 2022
- Critical9.8Apache APISIX Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.07%Feb 11, 2022
- High8.0Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 14.86%Feb 10, 2022
- High8.0Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 9.20%Feb 10, 2022
- High7.8Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 9.75%Feb 10, 2022
- Critical9.8Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 5.66%Feb 10, 2022
- Critical9.8Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 72.46%Feb 10, 2022
Sort