Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityPatch nowKEVEPSS 0.65%Sep 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion XHCI USB Controller VulnerabilityPatch nowKEVEPSS 3.54%Sep 11, 2024
- Unknownvertaai modeldb Path Traversal: '\..\filename'Patch nowKEVEPSS 2.97%Sep 11, 2024
- Medium6.0A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all v…Check if you run itEPSS 0.80%Sep 10, 2024
- High7.2Ivanti Cloud Services Appliance OS Command Injection VulnerabilityPatch nowKEVEPSS 88.53%Sep 10, 2024
- UnknownMicrosoft Windows Update Remote Code Execution VulnerabilityPatch nowKEVEPSS 12.92%Sep 10, 2024
- High8.8Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 54.49%Sep 10, 2024
- High7.3Microsoft Publisher Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 2.67%Sep 10, 2024
- Medium5.4Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 10.03%Sep 10, 2024
- High7.8Microsoft Windows Installer Improper Privilege Management VulnerabilityPatch nowKEVEPSS 6.26%Sep 10, 2024
- Unknownecho anti_cheat_tool Improper Privilege ManagementPatch nowKEVEPSS 0.47%Sep 10, 2024
- UnknownUnpatched Vulnerability in TI WooCommerce Wishlist PluginCheck if you run itEPSS 0.39%Sep 9, 2024
- Critical9.8SPIP SPIP External Control of File Name or PathPatch nowKEVEPSS 94.61%Sep 6, 2024
- Unknownvoipmonitor voipmonitor Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 36.63%Sep 6, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an active slave…Check if you run itEPSS 0.24%Sep 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set real_dev to NULL because packe…Check if you run itEPSS 0.24%Sep 4, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1] After ip6_local_ou…Check if you run itEPSS 0.26%Sep 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pti_clone_pgtable() alignment assumption Guenter reported dodgy crashes on an i386-nosm…Check if you run itEPSS 0.22%Sep 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking…Check if you run itEPSS 0.24%Sep 4, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almo…Check if you run itEPSS 0.21%Sep 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fi…Check if you run itEPSS 0.24%Sep 4, 2024
- High7.5A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries.Check if you run itEPSS 0.81%Sep 4, 2024
- Critical9.8Cisco Smart Licensing Utility Static Credential VulnerabilityPatch nowKEVEPSS 97.09%Sep 4, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- UnknownSensei LMS Email Template LeakPatch nowKEVEPSS 1.75%Sep 4, 2024
Sort