Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDell emc_avamar Missing AuthorizationPatch nowKEVEPSS 50.87%Feb 11, 2025
- Medium5.3Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.Check if you run itEPSS 0.58%Feb 10, 2025
- High8.6Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa…Check if you run itEPSS 0.60%Feb 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan found that ets_class_from_arg() can index an Out-…Check if you run itEPSS 0.62%Feb 10, 2025
- Medium5.3A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.Check if you run itEPSS 1.29%Feb 10, 2025
- Medium5.3A flaw in libtasn1 causes inefficient handling of specific certificate data.Check if you run itEPSS 1.11%Feb 10, 2025
- Medium5.4A flaw was found in npm-serialize-javascript.Check if you run itEPSS 1.12%Feb 10, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- Medium6.1Apple iOS and iPadOS Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.46%Feb 10, 2025
- UnknownFour-Faith F3x36 Router bapply.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.67%Feb 9, 2025
- Unknownmod_authnz_external_project mod_authnz_external Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.66%Feb 7, 2025
- High8.6Trimble Cityworks Deserialization VulnerabilityPatch nowKEVEPSS 31.09%Feb 6, 2025
- UnknownCVE-2024-50230 is listed by ALAS-2025-1957 (important): kernel.Check if you run itEPSS 0.28%Feb 5, 2025
- UnknownCVE-2024-50067 is listed by ALAS-2025-1957 (important): kernel.Check if you run itEPSS 0.24%Feb 5, 2025
- UnknownCVE-2024-49936 is listed by ALAS-2025-1957 (important): kernel.Check if you run itEPSS 0.27%Feb 5, 2025
- UnknownCVE-2024-47742 is listed by ALAS-2025-1957 (important): kernel.Check if you run itEPSS 0.29%Feb 5, 2025
- High7.3When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the option, **using zlib 1.2.0.3 or older**, an attacker-controlle…Check if you run itEPSS 1.80%Feb 5, 2025
- High7.0libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.Check if you run itEPSS 1.33%Feb 5, 2025
- Low3.4When asked to use a file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain c…Check if you run itEPSS 0.75%Feb 5, 2025
- UnknownBridge Core Plugin for WordPress 'import_action' and 'install_plugin_per_demo' Bypass VulnerabilityPatch nowKEVEPSS 0.32%Feb 5, 2025
- High7.5vitest.dev vitest Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.40%Feb 4, 2025
- High7.1Essential Addons for Elementor Reflected Cross Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 1.23%Feb 4, 2025
- UnknownNetis Router skk_get.cgi Information Disclosure VulnerabilityPatch nowKEVEPSS 6.29%Feb 4, 2025
- High7.5Advantive VeraCore SQL Injection VulnerabilityPatch nowKEVEPSS 55.55%Feb 3, 2025
- High8.8Advantive VeraCore Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 32.28%Feb 3, 2025
Sort