Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSudo Sudo Improper Privilege ManagementPatch nowKEVEPSS 55.37%Dec 6, 2024
- UnknownVanna DuckDB Integration SQL Injection VulnerabilityPatch nowKEVEPSS 3.42%Dec 5, 2024
- UnknownDocuSeal Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDocuSign Print Option Flattened Layer VulnerabilityPatch nowKEVEPSS 0.35%Dec 5, 2024
- UnknownDocumenso Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDropBox Sign Flattened Layer VulnerabilityPatch nowKEVEPSS 0.19%Dec 5, 2024
- UnknownDocuSign SaaS AI Assistant Hidden Content Rendering VulnerabilityPatch nowKEVEPSS 0.28%Dec 5, 2024
- UnknownOS4ED openSIS-Classic SQL Injection VulnerabilityPatch nowKEVEPSS 2.26%Dec 5, 2024
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 96.36%Dec 5, 2024
- Unknownhoverfly hoverfly Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 55.57%Dec 5, 2024
- UnknownFOG packages/web/lib/fog/reportmaker.class.php Command Injection VulnerabilityPatch nowKEVEPSS 23.24%Dec 5, 2024
- UnknownOpenAPI Generator outputFolder VulnerabilityPatch nowKEVEPSS 3.59%Dec 5, 2024
- UnknownF-logic DataCube3 /admin/transceiver_schedule.php File Upload VulnerabilityPatch nowKEVEPSS 12.75%Dec 5, 2024
- UnknownMicrosoft authenticator Improper AuthenticationPatch nowKEVEPSS 1.27%Dec 5, 2024
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 23.22%Dec 5, 2024
- Unknownchamilo chamilo Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 76.08%Dec 5, 2024
- Unknownsuperwebmailer superwebmailer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Dec 5, 2024
- Unknownphonepe phonepe Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 37.67%Dec 5, 2024
- Unknownseiko-sol skybridge_mb-a200_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 1.74%Dec 5, 2024
- Unknownwavlink wl-wn531p3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.52%Dec 5, 2024
- Unknownruijienetworks reyeeos Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.14%Dec 5, 2024
- UnknownAcmailer and Acmailer DB Survey Function VulnerabilityPatch nowKEVEPSS 7.41%Dec 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data.Check if you run itEPSS 0.24%Dec 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_pag…Check if you run itEPSS 0.55%Dec 4, 2024
- Medium6.5In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode mo…Check if you run itEPSS 0.24%Dec 4, 2024
Sort