Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7A race condition flaw was found in the Linux kernel sound subsystem due to improper locking.Check if you run itEPSS 0.32%Sep 27, 2022
- High8.8Google Chromium Network Service Use-After-Free VulnerabilityPatch nowKEVEPSS 24.93%Sep 26, 2022
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 95.48%Sep 25, 2022
- Low3.7When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make t…Check if you run itEPSS 3.84%Sep 23, 2022
- Medium6.1Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 46.73%Sep 21, 2022
- High7.0mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.Check if you run itEPSS 0.49%Sep 21, 2022
- Medium5.5In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.Check if you run itEPSS 0.83%Sep 21, 2022
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.51%Sep 19, 2022
- Critical9.8The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins.Check if you run itEPSS 1.58%Sep 19, 2022
- Critical9.8Teclib GLPI Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.85%Sep 19, 2022
- Medium5.5drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a mems…Check if you run itEPSS 0.30%Sep 18, 2022
- Unknownprofanity_project profanity Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.49%Sep 18, 2022
- Critical9.8Sophos Firewall Code Injection VulnerabilityPatch nowKEVEPSS 98.91%Sep 16, 2022
- High8.1libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.Check if you run itEPSS 2.25%Sep 14, 2022
- Unknownunisharp laravel_filemanager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.18%Sep 14, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 4.38%Sep 14, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 1.23%Sep 14, 2022
- High7.2Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityPatch nowKEVEPSS 3.29%Sep 13, 2022
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 28.27%Sep 13, 2022
- UnknownWordPress WPGateway Plugin Privilege EscalationPatch nowKEVEPSS 9.21%Sep 13, 2022
- Critical9.8cuppacms cuppacms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.66%Sep 12, 2022
- High7.8Apple iOS, iPadOS, and macOS Remote Code Execution VulnerabilityPatch nowKEVEPSS 5.60%Sep 12, 2022
- Medium5.5A flaw was found in the Linux kernel.Check if you run itEPSS 0.27%Sep 9, 2022
- Medium5.5A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/…Check if you run itEPSS 0.79%Sep 9, 2022
- Medium5.5An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '…Check if you run itEPSS 0.78%Sep 9, 2022
Sort