Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.Check if you run itEPSS 8.37%Jul 7, 2022
- Critical9.8When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name t…Check this weekEPSS 12.32%Jul 7, 2022
- Medium6.5curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms.Check this weekEPSS 36.35%Jul 7, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.Check this weekEPSS 31.50%Jul 7, 2022
- Medium5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.Check if you run itEPSS 4.90%Jul 5, 2022
- High7.8An issue was discovered in the Linux kernel through 5.18.9.Patch nowKEVEPSS 5.45%Jul 4, 2022
- Critical9.8The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions.Check this weekEPSS 48.23%Jul 1, 2022
- High8.8WebRTC Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 70.83%Jul 1, 2022
- Medium5.5A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat…Check if you run itEPSS 1.04%Jun 30, 2022
- Medium5.5A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c.Check if you run itEPSS 0.33%Jun 30, 2022
- UnknownOxilab Shortcode Addons Plugin Arbitrary Option Update VulnerabilityPatch nowKEVEPSS 3.35%Jun 30, 2022
- UnknownBiplob Adhikari's Accordions plugin Unauthenticated WordPress Options Change VulnerabilityPatch nowKEVEPSS 3.35%Jun 30, 2022
- Medium6.1Nagios Nagios XI URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.11%Jun 29, 2022
- Unknownyikesinc custom_product_tabs_for_woocommerce Improper AuthenticationPatch nowKEVEPSS 1.45%Jun 28, 2022
- Unknowncommscope ruckus_vriot Use of Hard-coded CredentialsPatch nowKEVEPSS 44.37%Jun 28, 2022
- Unknowncommscope ruckus_vriot Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 11.59%Jun 28, 2022
- UnknownCisco application_extension_platform Stack-based Buffer OverflowPatch nowKEVEPSS 18.50%Jun 22, 2022
- Unknownsoliton filezen Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.54%Jun 22, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Check this weekEPSS 96.39%Jun 21, 2022
- Medium5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclos…Check if you run itEPSS 6.45%Jun 15, 2022
- Medium5.5Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Check if you run itEPSS 6.45%Jun 15, 2022
- Medium5.5Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Check if you run itEPSS 6.87%Jun 15, 2022
- UnknownThunderbird for Windows ms-msdt, search, and search-ms Protocols VulnerabilityPatch nowKEVEPSS 0.80%Jun 15, 2022
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 0.41%Jun 14, 2022
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 0.68%Jun 13, 2022
Sort