Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknowniOS and iPadOS, macOS Ventura, iOS and iPadOS, and watchOS 9.2 URL Parsing VulnerabilityPatch nowKEVEPSS 2.28%Dec 13, 2022
- Critical9.8Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass VulnerabilityPatch nowKEVEPSS 6.86%Dec 13, 2022
- High7.3SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and…Check if you run itEPSS 0.45%Dec 12, 2022
- Critical9.8Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.47%Dec 12, 2022
- Unknownzivif pr115-204-p-rs_firmware Insufficiently Protected CredentialsPatch nowKEVEPSS 15.26%Dec 8, 2022
- Medium5.5Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond t…Check if you run itEPSS 0.22%Dec 7, 2022
- Medium5.5Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond t…Check if you run itEPSS 0.22%Dec 7, 2022
- Unknownflir flir_ax8_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 99.61%Dec 6, 2022
- Unknowndw megapix_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.81%Dec 6, 2022
- UnknownTelesquare sdt-cs3b1_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.42%Dec 6, 2022
- UnknownphpMyAdmin phpMyAdmin Improper AuthenticationPatch nowKEVEPSS 98.35%Dec 6, 2022
- Medium6.5curl can be told to parse a file for credentials.Check if you run itEPSS 2.70%Dec 5, 2022
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…Check if you run itEPSS 5.09%Dec 5, 2022
- Medium5.5A flaw was found in the Linux kernel Traffic Control (TC) subsystem.Check if you run itEPSS 0.20%Dec 5, 2022
- Critical9.8Cacti Command Injection VulnerabilityPatch nowKEVEPSS 99.83%Dec 5, 2022
- Medium5.3Avast Anti Rootkit kernel driver user controlled lengthPatch nowKEVEPSS 0.21%Dec 5, 2022
- High7.8Avast Anti Rootkit kernel driver user controlled lengthPatch nowKEVEPSS 0.18%Dec 5, 2022
- Unknownexternal_media_project external_media Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.77%Dec 5, 2022
- Unknowncozmoslabs user_profile_picture Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.73%Dec 5, 2022
- Unknownwpcentral wpcentral Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 7.36%Dec 5, 2022
- Unknownwebfactoryltd minimal_coming_soon_\&_maintenance_mode Missing AuthorizationPatch nowKEVEPSS 1.95%Dec 5, 2022
- Unknownsupsystic data_tables_generator Incorrect Default PermissionsPatch nowKEVEPSS 1.04%Dec 5, 2022
- UnknownStylemixThemes Motors - Car Dealer & Classified Ads Plugin (WordPress) Insufficient Verification of Data AuthenticityPatch nowKEVEPSS 1.15%Dec 5, 2022
- Unknownuserproplugin userpro Improper AuthenticationPatch nowKEVEPSS 27.37%Dec 5, 2022
- Unknownmailpoet mailpoet_newsletters Improper AuthenticationPatch nowKEVEPSS 60.66%Dec 5, 2022
Sort