Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownkyocera d-copia253mf_plus_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 36.19%Nov 13, 2023
- Unknownphpgurukul hospital_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.35%Nov 13, 2023
- Unknownmyucms_project myucms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.23%Nov 13, 2023
- UnknownWSO2 api_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 26.22%Nov 13, 2023
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 87.33%Nov 13, 2023
- Unknownnortekcontrol linear_emerge_essential_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 81.87%Nov 13, 2023
- Unknownyouphptube youphptube_encoder Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 45.30%Nov 13, 2023
- Unknowndedecms dedecms Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 74.12%Nov 13, 2023
- UnknownElastic Kibana External Control of File Name or PathPatch nowKEVEPSS 84.29%Nov 13, 2023
- Unknownboa boa Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 68.46%Nov 13, 2023
- UnknownNETGEAR readynas_surveillance_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 8.17%Nov 13, 2023
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 86.31%Nov 13, 2023
- UnknownApache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.71%Nov 9, 2023
- Critical9.8SysAid Server Path Traversal VulnerabilityPatch nowKEVEPSS 98.85%Nov 8, 2023
- Medium5.3Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.Check if you run itEPSS 4.46%Nov 6, 2023
- Critical9.8Qualitor qualitor Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 14.31%Nov 6, 2023
- Medium4.3The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code.Check if you run itEPSS 0.32%Nov 3, 2023
- UnknownCVE-2023-39325 is listed by HCSEC-2023-32 - Vault, Consul, and Boundary Affected By HTTP/2 “Rapid Reset” Denial of Service Vulnerability (CVE-2023-44487).Check if you run itEPSS 3.80%Nov 2, 2023
- High8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.Check if you run itEPSS 9.62%Nov 1, 2023
- Low3.1sudo-rs: Path Traversal vulnerabilityCheck if you run itEPSS 0.63%Nov 1, 2023
- Critical9.8gamipress gamipress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.55%Oct 31, 2023
- Critical9.8Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityPatch nowKEVEPSS 100.00%Oct 31, 2023
- UnknownCitrix SD-WAN and NetScaler Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.55%Oct 31, 2023
- Medium4.7An issue was discovered in the Linux kernel through 6.5.9.Check if you run itEPSS 0.23%Oct 29, 2023
- Unknown10Web Booster WordPress plugin AJAX actions VulnerabilityPatch nowKEVEPSS 2.79%Oct 29, 2023
Sort