Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.28%Sep 6, 2023
- High7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.29%Sep 6, 2023
- High7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.41%Sep 6, 2023
- High8.7Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 0.52%Sep 6, 2023
- High8.8Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Sep 6, 2023
- Critical10.0D-Link dir-110_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.13%Sep 6, 2023
- Critical9.8Cacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Sep 5, 2023
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 2.64%Sep 5, 2023
- UnknownGoogle Chrome Access of Resource Using Incompatible Type ('Type Confusion')Patch nowKEVEPSS 1.46%Sep 5, 2023
- High7.8Path traversal in ArchiveCheck if you run itEPSS 0.37%Aug 31, 2023
- High7.8Filename spoofing in archiveCheck if you run itEPSS 0.35%Aug 31, 2023
- UnknownAdobe ColdFusion Deserialization of Untrusted DataPatch nowKEVEPSS 66.94%Aug 30, 2023
- UnknownProgress MOVEit Transfer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 96.68%Aug 30, 2023
- Medium6.5Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c.Check if you run itEPSS 1.08%Aug 29, 2023
- Medium6.5Qlik Sense Path Traversal VulnerabilityPatch nowKEVEPSS 84.84%Aug 29, 2023
- Critical9.9Qlik Sense HTTP Tunneling VulnerabilityPatch nowKEVEPSS 88.22%Aug 29, 2023
- High7.5KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityPatch nowKEVEPSS 1.36%Aug 29, 2023
- Unknownincsub forminator Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 14.32%Aug 29, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.12%Aug 29, 2023
- Critical9.1Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityPatch nowKEVEPSS 26.62%Aug 29, 2023
- Critical9.8phpjabbers food_delivery_script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.32%Aug 28, 2023
- Low2.1A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3.Check this weekEPSS 30.68%Aug 26, 2023
- Unknownjaycar la5570_firmware Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 5.37%Aug 25, 2023
- High7.5A use-after-free exists in Python through 3.9 via heappushpop in heapq.Check if you run itEPSS 2.04%Aug 22, 2023
- Critical9.8In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.Check if you run itEPSS 3.46%Aug 22, 2023
Sort