Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownbinarymoon timthumb Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.75%Oct 15, 2024
- UnknownMapplic and Mapplic Lite plugins for WordPress SVG File Server Side Request Forgery VulnerabilityPatch nowKEVEPSS 1.18%Oct 15, 2024
- UnknownAngular-base64-upload demo/server.php VulnerabilityPatch nowKEVEPSS 40.21%Oct 14, 2024
- Unknowntrendnet tew-652brp_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.85%Oct 12, 2024
- UnknownASUS asuswrt Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.77%Oct 12, 2024
- UnknownHunk Companion Plugin for WordPress /wp-json/hc/v1/themehunk-import REST API VulnerabilityPatch nowKEVEPSS 9.08%Oct 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 2.31%Oct 11, 2024
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 0.50%Oct 11, 2024
- UnknownRed Hat satellite Insufficient Session ExpirationPatch nowKEVEPSS 0.65%Oct 10, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] dmub_rb_cmd's ramping_boundar…Check if you run itEPSS 0.25%Oct 9, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories can have many (usually negat…Check if you run itEPSS 0.16%Oct 9, 2024
- Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityPatch nowKEVEPSS 99.63%Oct 9, 2024
- Critical9.9Palo Alto Networks Expedition OS Command Injection VulnerabilityPatch nowKEVEPSS 98.55%Oct 9, 2024
- Critical9.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 23.18%Oct 9, 2024
- UnknownD-Link dir-816_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.10%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- UnknownIvanti CSA Path Traversal Security Bypass VulnerabilityPatch nowKEVEPSS 15.55%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityPatch nowKEVEPSS 58.32%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityPatch nowKEVEPSS 44.27%Oct 8, 2024
- UnknownLatePoint latepoint Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 3.08%Oct 8, 2024
- UnknownLatePoint latepoint Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.90%Oct 8, 2024
- UnknownQualitor checkAcesso.php Remote Code Execution VulnerabilityPatch nowKEVEPSS 46.29%Oct 8, 2024
- High8.1Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 46.11%Oct 8, 2024
- High7.8Microsoft Windows Management Console Remote Code Execution VulnerabilityPatch nowKEVEPSS 66.70%Oct 8, 2024
- UnknownOracle WebLogic Server Core Component T3/IIOP Unauthenticated VulnerabilityPatch nowKEVEPSS 0.87%Oct 8, 2024
Sort