Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownapache2 CVE-2018-11763Patch nowKEVEPSS 50.85%Feb 22, 2022
- Unknownapache2 CVE-2017-9798Patch nowKEVEPSS 95.00%Feb 22, 2022
- UnknownApache HTTP Server Improper Input ValidationPatch nowKEVEPSS 56.77%Feb 22, 2022
- Unknownapache2 CVE-2017-7668Patch nowKEVEPSS 57.47%Feb 22, 2022
- Unknownapache2 CVE-2017-7659Patch nowKEVEPSS 53.94%Feb 22, 2022
- Unknownapache2 CVE-2017-15715Patch nowKEVEPSS 85.45%Feb 22, 2022
- Medium5.5A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support.Check if you run itEPSS 0.43%Feb 21, 2022
- Unknownatt communication_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.06%Feb 20, 2022
- High7.1An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel.Check if you run itEPSS 0.34%Feb 18, 2022
- Critical10.0Debian-specific Redis Server Lua Sandbox Escape VulnerabilityPatch nowKEVEPSS 99.35%Feb 18, 2022
- Critical9.8In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.Check if you run itEPSS 4.82%Feb 18, 2022
- High7.5In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.Check if you run itEPSS 4.82%Feb 18, 2022
- Medium6.5In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.Check if you run itEPSS 3.29%Feb 18, 2022
- Unknownrigoblock drago Incorrect AuthorizationPatch nowKEVEPSS 1.28%Feb 18, 2022
- Medium6.5updraftplus updraftplus Incorrect AuthorizationPatch nowKEVEPSS 2.07%Feb 17, 2022
- Critical9.8mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.41%Feb 17, 2022
- Critical9.8D-Link Multiple Routers Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.84%Feb 17, 2022
- High7.8Red Hat Polkit Incorrect Authorization VulnerabilityPatch nowKEVEPSS 23.71%Feb 16, 2022
- Critical9.8xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.Check this weekEPSS 35.27%Feb 16, 2022
- Critical9.8xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.Check if you run itEPSS 4.96%Feb 16, 2022
- Medium5.5In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.Check if you run itEPSS 1.48%Feb 14, 2022
- Medium6.1noptin noptin URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.30%Feb 14, 2022
- Critical9.8Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.20%Feb 14, 2022
- Unknowncerber wp_cerber_security\,_anti-spam_\&_malware_scan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.34%Feb 14, 2022
- Critical9.8It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/pubCheck if you run itEPSS 1.62%Feb 11, 2022
Sort