Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownfiberhome an5506-01-a_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.08%Dec 20, 2024
- High7.8astro astro Storage of File with Sensitive Data Under Web RootPatch nowKEVEPSS 1.54%Dec 19, 2024
- High8.8Digiever DS-2105 Pro Missing Authorization VulnerabilityPatch nowKEVEPSS 96.92%Dec 19, 2024
- Unknownlenovo diagnostics Out-of-bounds WritePatch nowKEVEPSS 4.25%Dec 19, 2024
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
- High7.2BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityPatch nowKEVEPSS 32.22%Dec 18, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method…Check if you run itEPSS 0.42%Dec 17, 2024
- Critical9.8BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityPatch nowKEVEPSS 87.26%Dec 16, 2024
- Unknownmimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.31%Dec 16, 2024
- UnknownApache Struts File Upload VulnerabilityPatch nowKEVEPSS 72.37%Dec 15, 2024
- High7.4A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.Check if you run itEPSS 0.84%Dec 12, 2024
- UnknownIvanti avalanche Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 91.98%Dec 12, 2024
- UnknownSign In With Google plugin for WordPress authenticate_user Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.81%Dec 12, 2024
- Low3.4When asked to both use a file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain…Check if you run itEPSS 1.97%Dec 11, 2024
- Unknownlubus wp_query_console Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 52.91%Dec 10, 2024
- Low2.7Mitel MiCollab Path Traversal VulnerabilityPatch nowKEVEPSS 38.16%Dec 10, 2024
- Critical9.8Cleo Multiple Products Unauthenticated File Upload VulnerabilityPatch nowKEVEPSS 93.97%Dec 10, 2024
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 26.21%Dec 10, 2024
- UnknownMitel MiCollab NuPoint Messenger (NPM) SQL Injection VulnerabilityPatch nowKEVEPSS 65.73%Dec 10, 2024
- Unknowniboss secure_web_gateway Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 22.00%Dec 10, 2024
- UnknownHunk Companion Plugin Unauthenticated POST Request VulnerabilityPatch nowKEVEPSS 59.05%Dec 10, 2024
- UnknownCodeChecker API URL Authentication Bypass VulnerabilityPatch nowKEVEPSS 39.92%Dec 10, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not presen…Check if you run itEPSS 0.40%Dec 6, 2024
- UnknownLinux Kernel Use After FreePatch nowKEVEPSS 1.30%Dec 6, 2024
- UnknownLinux Kernel Use After FreePatch nowKEVEPSS 1.89%Dec 6, 2024
Sort