Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownVMware ESXi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.38%Feb 27, 2025
- Unknownnombas scriptease_webserver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.88%Feb 27, 2025
- UnknownX Server Disabled Access Control VulnerabilityPatch nowKEVEPSS 20.82%Feb 27, 2025
- High7.5A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made.Check if you run itEPSS 0.99%Feb 26, 2025
- High7.8be2net: Fix buffer overflow in be_get_module_eepromCheck if you run itEPSS 0.31%Feb 26, 2025
- High7.8zsmalloc: fix races between asynchronous zspage free and page migrationCheck if you run itEPSS 0.22%Feb 26, 2025
- Critical9.8dlm: fix plock invalid readCheck if you run itEPSS 0.87%Feb 26, 2025
- High7.8memstick/mspro_block: fix handling of read-only devicesCheck if you run itEPSS 0.28%Feb 26, 2025
- High7.8ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commitCheck if you run itEPSS 0.28%Feb 26, 2025
- High8.8scsi: qla2xxx: Implement ref count for SRBCheck if you run itEPSS 0.33%Feb 26, 2025
- Critical9.8rxrpc: Fix call timer start racing with call destructionCheck if you run itEPSS 0.50%Feb 26, 2025
- High7.5netfilter: conntrack: revisit gc autotuningCheck if you run itEPSS 0.61%Feb 26, 2025
- Critical9.8net/tls: fix slab-out-of-bounds bug in decrypt_internalCheck if you run itEPSS 0.67%Feb 26, 2025
- High7.1net: ipv4: fix route with nexthop object delete warningCheck if you run itEPSS 0.28%Feb 26, 2025
- High7.8IB/rdmavt: add lock to call to rvt_error_qp to prevent a race conditionCheck if you run itEPSS 0.19%Feb 26, 2025
- High7.5ipv6: fix panic when forwarding a pkt with no in6 devCheck if you run itEPSS 0.69%Feb 26, 2025
- UnknownMicrosoft Windows Improper Access ControlPatch nowKEVEPSS 4.52%Feb 26, 2025
- UnknownMicrosoft xbox_gaming_services Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.65%Feb 26, 2025
- UnknownMicrosoft Windows Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 1.38%Feb 26, 2025
- UnknownLinux Kernel Use After FreePatch nowKEVEPSS 12.84%Feb 26, 2025
- Unknownkrpano krpano Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.12%Feb 26, 2025
- Medium6.5Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an or…Check if you run itEPSS 0.69%Feb 25, 2025
- High8.8Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.Check if you run itEPSS 0.69%Feb 25, 2025
- UnknownNextChat NextChat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.17%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.29%Feb 25, 2025
Sort