Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3churchcrm churchcrm Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.46%Feb 18, 2025
- Medium6.1The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly r…Check if you run itEPSS 0.18%Feb 18, 2025
- Unknownusualtool usualtoolcms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.62%Feb 18, 2025
- High7.3Yeti Server Side Template Injection VulnerabilityPatch nowKEVEPSS 3.92%Feb 18, 2025
- Low2.3There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can cre…Check if you run itEPSS 0.71%Feb 14, 2025
- High8.3A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope.Check if you run itEPSS 0.82%Feb 13, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to…Check if you run itEPSS 0.23%Feb 13, 2025
- UnknownOracle WebLogic Server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.82%Feb 13, 2025
- UnknownPostgreSQL Quoting APIs SQL Injection VulnerabilityPatch nowKEVEPSS 90.03%Feb 13, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap() When mremap()ing a memory region previously registered…Check if you run itEPSS 0.26%Feb 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlock…Check if you run itEPSS 0.24%Feb 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CP…Check if you run itEPSS 0.26%Feb 12, 2025
- High7.1Palo Alto Networks PAN-OS File Read VulnerabilityPatch nowKEVEPSS 2.00%Feb 12, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.14%Feb 12, 2025
- Critical9.8apusthemes superio Incorrect Privilege AssignmentPatch nowKEVEPSS 0.66%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK x6000r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.95%Feb 12, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.13%Feb 11, 2025
- High7.1Microsoft Windows Storage Link Following VulnerabilityPatch nowKEVEPSS 2.28%Feb 11, 2025
- Unknowniptanus wordpress_file_upload Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 93.34%Feb 11, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.16%Feb 11, 2025
- Unknownvercel next.js Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 59.18%Feb 11, 2025
- UnknownCVE-2024-12105 is named in a Cloudflare managed-rules release.Check this weekEPSS 41.68%Feb 11, 2025
Sort