Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownFatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 "cmuser" Backdoor AccountPatch nowKEVEPSS 5.47%May 5, 2023
- Critical9.8e-office e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 32.90%May 4, 2023
- High8.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13,…Check if you run itEPSS 0.89%May 3, 2023
- UnknownSPIP before 4.2.1 Remote Code ExecutionPatch nowKEVEPSS 99.68%May 3, 2023
- Unknownawesomemotive easy_digital_downloads Improper AuthenticationPatch nowKEVEPSS 3.10%May 2, 2023
- UnknownWindows Network File System Remote Code ExecutionPatch nowKEVEPSS 72.56%May 2, 2023
- Unknownrockwellautomation connected_component_workbench Deserialization of Untrusted DataPatch nowKEVEPSS 11.10%May 2, 2023
- Unknownthoughtworks gocd Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 27.36%May 2, 2023
- UnknownApache openoffice Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 50.56%May 2, 2023
- Unknownhitachi vantara_pentaho Improper AuthenticationPatch nowKEVEPSS 51.65%May 2, 2023
- Unknownmalwarefox anti-malware Improper Input ValidationPatch nowKEVEPSS 1.06%May 2, 2023
- High8.8Apple Multiple Products WebKit Use-After-Free VulnerabilityPatch nowKEVEPSS 12.17%May 1, 2023
- Medium6.5Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 14.29%May 1, 2023
- High7.8qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.Check if you run itEPSS 0.60%Apr 28, 2023
- Unknowntrustwallet trust_wallet_browser_extension Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.05%Apr 27, 2023
- Unknownrazer sila_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.06%Apr 27, 2023
- Critical9.8Vinga WR-AC1200 Password Parameter VulnerabilityPatch nowKEVEPSS 1.57%Apr 26, 2023
- High7.8Apptainer is an open source container platform for Linux.Check if you run itEPSS 0.37%Apr 25, 2023
- High8.1Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstrat…Check if you run itEPSS 0.84%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the br…Check if you run itEPSS 0.65%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary we…Check if you run itEPSS 0.55%Apr 25, 2023
- Critical9.1A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.Check if you run itEPSS 0.69%Apr 25, 2023
- Medium6.8A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, inclu…Check if you run itEPSS 0.48%Apr 25, 2023
- Medium4.3Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notificat…Check if you run itEPSS 0.46%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting jou…Check if you run itEPSS 0.49%Apr 25, 2023
Sort