Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownjournyx journyx Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 32.92%Sep 4, 2024
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 63.56%Sep 4, 2024
- Unknownyandex yandex_browser Untrusted Search PathPatch nowKEVEPSS 0.71%Sep 3, 2024
- UnknownHAProxy Endless Loop HTTP/2 VulnerabilityPatch nowKEVEPSS 1.20%Sep 3, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing…Check if you run itEPSS 0.24%Aug 30, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityPatch nowKEVEPSS 93.00%Aug 29, 2024
- UnknownFastAdmin /index/ajax/lang Directory Traversal VulnerabilityPatch nowKEVEPSS 16.88%Aug 29, 2024
- UnknownAVTECH IP Camera Command Injection VulnerabilityPatch nowKEVEPSS 43.34%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Aug 28, 2024
- Unknownsuperstorefinder super_store_finder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Aug 28, 2024
- Unknownsunshinephotocart sunshine_photo_cart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Aug 28, 2024
- Critical10.0HP intelligent_management_center Deserialization of Untrusted DataPatch nowKEVEPSS 0.96%Aug 28, 2024
- UnknownD-Link DIR-825 R1 Devices Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.25%Aug 28, 2024
- Unknownverizon fios_quantum_gateway_g1100_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 29.89%Aug 28, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock().Check if you run itEPSS 0.23%Aug 26, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an inva…Check if you run itEPSS 0.26%Aug 26, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at risk of overflowing.Check if you run itEPSS 0.26%Aug 26, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() We are hit with a not easily reproduci…Check if you run itEPSS 0.24%Aug 26, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is supposed to be called und…Check if you run itEPSS 0.25%Aug 26, 2024
- High7.5Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client sid…Check if you run itEPSS 1.08%Aug 26, 2024
- UnknownWordPress Name Directory Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.26%Aug 26, 2024
- Unknownposimyth the_plus_addons_for_elementor Missing AuthorizationPatch nowKEVEPSS 0.56%Aug 26, 2024
- Unknowntemplateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.96%Aug 24, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Aug 23, 2024
Sort