Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails.Check if you run itEPSS 0.97%Oct 6, 2023
- Medium5.5A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel.Check if you run itEPSS 0.41%Oct 5, 2023
- Medium5.5A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack.Check if you run itEPSS 0.43%Oct 5, 2023
- High7.8Apple iOS and iPadOS Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.97%Oct 4, 2023
- Critical9.8Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityPatch nowKEVEPSS 99.22%Oct 4, 2023
- High7.8GNU C Library Buffer Overflow VulnerabilityPatch nowKEVEPSS 63.77%Oct 3, 2023
- Critical9.8Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changi…Check if you run itEPSS 0.44%Oct 2, 2023
- High7.8Qualcomm Multiple Chipsets Integer Overflow VulnerabilityPatch nowKEVEPSS 0.74%Oct 2, 2023
- High7.8Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset VulnerabilityPatch nowKEVEPSS 0.79%Oct 2, 2023
- UnknownOpenHook plugin for WordPress 'php' shortcode Remote Code Execution VulnerabilityPatch nowKEVEPSS 1.71%Sep 29, 2023
- Critical9.6Google Skia Integer Overflow VulnerabilityPatch nowKEVEPSS 16.47%Sep 28, 2023
- Medium6.6A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.37%Sep 27, 2023
- High8.8Progress WS_FTP Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 90.35%Sep 27, 2023
- Medium6.6Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.48%Sep 27, 2023
- UnknownFirefox for Android iframe Sandbox Bypass via intent: url Scheme VulnerabilityPatch nowKEVEPSS 0.79%Sep 27, 2023
- UnknownApple macOS iframe Sandboxing VulnerabilityPatch nowKEVEPSS 1.52%Sep 27, 2023
- UnknownGoogle Chrome Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 1.04%Sep 27, 2023
- High7.8An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.Check if you run itEPSS 0.51%Sep 25, 2023
- High7.5A flaw was found in the GNU C Library.Check if you run itEPSS 1.63%Sep 25, 2023
- High8.8Google Chromium libvpx Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 49.01%Sep 25, 2023
- High7.8The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece.Check if you run itEPSS 0.29%Sep 22, 2023
- Medium6.1Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 63.66%Sep 21, 2023
- High8.6blurhash: panic on parsing crafted blurhash inputsCheck if you run itEPSS 0.62%Sep 19, 2023
- High8.6phonenumber: panic on parsing crafted RF3966 phonenumber inputsCheck if you run itEPSS 0.87%Sep 19, 2023
- Critical9.8JetBrains TeamCity Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.99%Sep 19, 2023
Sort