Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMozilla Firefox Out-of-bounds WritePatch nowKEVEPSS 2.78%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 28.49%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.61%Aug 15, 2022
- UnknownMozilla Firefox Use After FreePatch nowKEVEPSS 0.95%Aug 15, 2022
- Unknownomron nx701-1600_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.26%Aug 13, 2022
- Medium6.7Dm-verity is used for extending root-of-trust to root filesystems.Check if you run itEPSS 0.42%Aug 12, 2022
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.89%Aug 10, 2022
- UnknownVMware vRealize Operations Authentication BypassPatch nowKEVEPSS 0.83%Aug 10, 2022
- High8.6Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityPatch nowKEVEPSS 2.54%Aug 10, 2022
- High7.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityPatch nowKEVEPSS 67.76%Aug 9, 2022
- Unknownnsqua simply_schedule_appointments Missing AuthorizationPatch nowKEVEPSS 1.98%Aug 8, 2022
- High8.2A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size.Check if you run itEPSS 4.39%Aug 5, 2022
- Critical9.8zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.Check this weekEPSS 19.24%Aug 5, 2022
- High7.5SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.Check this weekEPSS 23.57%Aug 3, 2022
- High7.5A vulnerability found in gnutls.Check if you run itEPSS 2.25%Aug 1, 2022
- Unknownideastocode Enable SVG, WebP, and ICO Upload Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Aug 1, 2022
- High7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).Check if you run itEPSS 0.89%Jul 29, 2022
- Medium6.1Possible cross-site scripting vulnerability in libxml after commit 960f0e2.Check if you run itEPSS 1.31%Jul 28, 2022
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.60%Jul 28, 2022
- High7.5nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case o…Check if you run itEPSS 8.87%Jul 27, 2022
- Medium5.5An issue was discovered in the Linux kernel through 5.18.14.Check if you run itEPSS 0.32%Jul 27, 2022
- Unknownslickremix feed_them_social Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.01%Jul 26, 2022
- Unknowntransposh transposh_wordpress_translation Missing AuthorizationPatch nowKEVEPSS 4.79%Jul 25, 2022
- High7.8io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP.Check if you run itEPSS 0.31%Jul 22, 2022
- Unknownprestashop prestashop Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.72%Jul 22, 2022
Sort