Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownarmemberplugin armember Missing AuthorizationPatch nowKEVEPSS 8.67%Jun 6, 2022
- Low3.3The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.Check if you run itEPSS 0.44%Jun 5, 2022
- High7.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an inc…Check if you run itEPSS 2.91%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.06%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.31%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- High8.8Tenda hg6_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.95%Jun 2, 2022
- Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.Check if you run itEPSS 1.36%Jun 2, 2022
- High7.5libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…Check if you run itEPSS 3.09%Jun 2, 2022
- High7.5libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server…Check if you run itEPSS 2.90%Jun 2, 2022
- High7.5The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host n…Check if you run itEPSS 2.52%Jun 2, 2022
- Medium5.3libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies.Check if you run itEPSS 2.79%Jun 2, 2022
- High8.1A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when is used together with .Check if you run itEPSS 3.81%Jun 2, 2022
- Medium6.5A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but ano…Check if you run itEPSS 4.10%Jun 2, 2022
- High7.5An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…Check if you run itEPSS 3.34%Jun 2, 2022
- Medium5.7An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials wh…Check if you run itEPSS 2.01%Jun 2, 2022
- Medium6.3An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem.Check if you run itEPSS 0.34%Jun 2, 2022
- High7.5Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.Check if you run itEPSS 1.13%Jun 1, 2022
- UnknownIn ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking.Check if you run itEPSS 0.14%Jun 1, 2022
- Unknownglpi-project barcode Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 52.66%May 31, 2022
- Unknownmontala resourcespace Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 77.89%May 31, 2022
- UnknownMicrosoft Exchange Server Spoofing VulnerabilityPatch nowKEVEPSS 93.50%May 31, 2022
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 85.40%May 31, 2022
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 38.30%May 31, 2022
Sort