Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.40%Apr 13, 2021
- High7.2SonicWall Email Security Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 16.64%Apr 9, 2021
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- High8.8Google Chromium Blink Use-After-Free VulnerabilityPatch nowKEVEPSS 9.31%Apr 7, 2021
- Medium4.9ASUS asmb9-ikvm_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 1.81%Apr 6, 2021
- High8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Crypt…Check if you run itEPSS 1.74%Apr 5, 2021
- High8.8Apple Multiple Products Type Confusion VulnerabilityPatch nowKEVEPSS 13.98%Apr 2, 2021
- Low3.7curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.Check if you run itEPSS 3.06%Apr 1, 2021
- Medium5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.Check if you run itEPSS 5.30%Apr 1, 2021
- Critical9.8F5 BIG-IP Traffic Management Microkernel Buffer OverflowPatch nowKEVEPSS 62.42%Mar 31, 2021
- High7.5VMware Server Side Request Forgery in vRealize Operations Manager APIPatch nowKEVEPSS 78.00%Mar 31, 2021
- Critical9.8F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.90%Mar 31, 2021
- Low3.3A flaw was found in the src/list.c of tar 1.33 and earlier.Check if you run itEPSS 1.09%Mar 26, 2021
- High7.5Micro Focus Access Manager Information Leakage VulnerabilityPatch nowKEVEPSS 25.70%Mar 26, 2021
- Medium6.1Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 7.08%Mar 26, 2021
- Medium5.5A flaw was found in SQLite's SELECT query functionality (src/select.c).Check if you run itEPSS 0.65%Mar 23, 2021
- High7.5Grafana Snapshot Feature Remote API Denial of ServicePatch nowKEVEPSS 83.04%Mar 18, 2021
- Medium6.5The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies.Check if you run itEPSS 2.17%Mar 15, 2021
- Medium5.5Arm Trusted Firmware Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.06%Mar 15, 2021
- Critical9.8Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 82.86%Mar 15, 2021
- Critical9.8A flaw was found in gnutls.Check if you run itEPSS 3.35%Mar 12, 2021
- Critical9.8A flaw was found in gnutls.Check if you run itEPSS 3.65%Mar 12, 2021
- Medium5.3An issue was discovered in GNOME GLib before 2.66.8.Check if you run itEPSS 2.71%Mar 11, 2021
- High8.8Microsoft Internet Explorer Remote Code Execution VulnerabilityPatch nowKEVEPSS 5.45%Mar 11, 2021
- High7.6Microsoft Office Remote Code Execution VulnerabilityPatch nowKEVEPSS 6.08%Mar 11, 2021
Sort