Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly creat…Check if you run itEPSS 0.49%Nov 17, 2024
- Medium5.3MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 33.26%Nov 15, 2024
- UnknownFortinet forticlient Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 0.14%Nov 15, 2024
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 28.39%Nov 14, 2024
- Unknownreally-simple-plugins really_simple_security Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 82.22%Nov 14, 2024
- UnknownChartify WordPress Chart Plugin For WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 4.81%Nov 14, 2024
- UnknownD-Link dns-320_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 97.54%Nov 13, 2024
- Critical9.8A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through…Check if you run itEPSS 0.60%Nov 12, 2024
- Medium5.1Citrix Session Recording Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 21.09%Nov 12, 2024
- Medium5.1Citrix Session Recording Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.48%Nov 12, 2024
- High8.8Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityPatch nowKEVEPSS 14.18%Nov 12, 2024
- Medium6.5Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 84.27%Nov 12, 2024
- Critical9.8gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.Check if you run itEPSS 1.51%Nov 11, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key() trie_get_next_key() allocates a node stack with…Check if you run itEPSS 0.27%Nov 9, 2024
- Medium6.2In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offse…Check if you run itEPSS 0.53%Nov 9, 2024
- UnknownFour-Faith adjust_sys_time OS Command InjectionPatch nowKEVEPSS 84.12%Nov 9, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() If get_clock_desc() succeeds…Check if you run itEPSS 0.17%Nov 8, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() The step variable is initi…Check if you run itEPSS 0.23%Nov 8, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the D…Check if you run itEPSS 0.22%Nov 8, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEM_UNINIT's meaning Lonial reported an issue in the BPF verifier where che…Check if you run itEPSS 0.21%Nov 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix null-ptr-deref in target_alloc_device() There is a null-ptr-deref issue rep…Check if you run itEPSS 0.26%Nov 7, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2_IOCTL request When using encryption, either enforced by th…Check if you run itEPSS 0.28%Nov 7, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its parent…Check if you run itEPSS 0.24%Nov 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory-access in proto_unregister There's issue as follows: KASAN: maybe…Check if you run itEPSS 0.26%Nov 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validat…Check if you run itEPSS 0.26%Nov 7, 2024
Sort