Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.Check if you run itEPSS 5.10%Jan 10, 2022
- Medium5.3SolarWinds Serv-U Improper Input Validation VulnerabilityPatch nowKEVEPSS 3.45%Jan 10, 2022
- High7.8In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.Check if you run itEPSS 4.22%Jan 6, 2022
- High7.8Arm Mali GPU Kernel Driver Unspecified VulnerabilityPatch nowKEVEPSS 1.06%Jan 6, 2022
- High8.8In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too…Check if you run itEPSS 4.67%Jan 1, 2022
- High7.8Samsung Mobile Devices Use-After-Free VulnerabilityPatch nowKEVEPSS 0.39%Jan 1, 2022
- High8.1Acclaim Systems USAHERDS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 17.58%Dec 21, 2021
- High7.5Omnissa Workspace ONE Server-Side Request ForgeryPatch nowKEVEPSS 99.68%Dec 17, 2021
- Medium6.1Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 30.93%Dec 16, 2021
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.28%Dec 15, 2021
- High7.1Microsoft Windows AppX Installer Spoofing VulnerabilityPatch nowKEVEPSS 11.29%Dec 14, 2021
- High7.5GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 36.14%Dec 13, 2021
- Critical9.8Zoho Desktop Central Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.87%Dec 10, 2021
- High8.8Google Chromium V8 Use-After-Free VulnerabilityPatch nowKEVEPSS 7.84%Dec 9, 2021
- Critical9.8Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityPatch nowKEVEPSS 99.11%Dec 8, 2021
- High8.8FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploitPatch nowKEVEPSS 39.68%Dec 8, 2021
- Critical9.8SonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.91%Dec 8, 2021
- High7.5Grafana Path Traversal VulnerabilityPatch nowKEVEPSS 88.50%Dec 7, 2021
- High7.8Fortinet FortiOS Arbitrary File DownloadPatch nowKEVEPSS 0.86%Dec 7, 2021
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Dec 6, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Dec 6, 2021
- Critical9.8Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 82.58%Dec 3, 2021
- Critical9.8contest_gallery contest_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.00%Nov 29, 2021
- Critical9.8Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityPatch nowKEVEPSS 93.30%Nov 28, 2021
- Critical9.8Roundcube Webmail SQL Injection VulnerabilityPatch nowKEVEPSS 69.88%Nov 18, 2021
Sort