Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3ServiceNow Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.98%Jul 10, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the cal…Check if you run itEPSS 0.24%Jul 10, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning up the pr…Check if you run itEPSS 0.24%Jul 10, 2024
- UnknownYITH WooCommerce Ajax Product Filter Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.30%Jul 10, 2024
- Critical9.0RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challen…Check this weekEPSS 14.86%Jul 9, 2024
- High7.2Microsoft SharePoint Deserialization VulnerabilityPatch nowKEVEPSS 50.89%Jul 9, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() In function bond_option_arp_ip_targets_set()Check if you run itEPSS 0.25%Jul 9, 2024
- Unknownpdoc API Documentation for Python Projects 'pdoc --math' VulnerabilityPatch nowKEVEPSS 3.83%Jul 9, 2024
- High7.5Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 84.23%Jul 9, 2024
- High7.8Microsoft Windows Hyper-V Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.12%Jul 9, 2024
- UnknownUser Activity Log Pro Plugin Broken Access ControlPatch nowKEVEPSS 0.35%Jul 9, 2024
- UnknownWP User Switch Plugin Privilege EscalationPatch nowKEVEPSS 0.37%Jul 9, 2024
- High7.0A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).Patch nowKEVEPSS 27.93%Jul 8, 2024
- UnknownWBW Product Table plugin for WordPress saveCustomTitle VulnerabilityPatch nowKEVEPSS 1.21%Jul 8, 2024
- Unknownwebnus modern_events_calendar Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.12%Jul 8, 2024
- High8.6phonenumber: panic on parsing crafted phonenumber inputsCheck if you run itEPSS 0.71%Jul 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either alloca…Check if you run itEPSS 0.24%Jul 5, 2024
- Unknownwpwebelite woocommerce_social_login Deserialization of Untrusted DataPatch nowKEVEPSS 0.31%Jul 5, 2024
- Critical9.9Gogs Gogs Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 7.74%Jul 4, 2024
- UnknownWordPress JetThemeCore Plugin Arbitrary File DeletionPatch nowKEVEPSS 0.68%Jul 4, 2024
- Unknownradiustheme the_post_grid Missing AuthorizationPatch nowKEVEPSS 0.34%Jul 4, 2024
- Unknownchurch_admin_project church_admin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.54%Jul 4, 2024
- UnknownF-Logic DataCube3 req_id SQL InjectionPatch nowKEVEPSS 19.27%Jul 3, 2024
- UnknownArtifex Ghostscript SAFER Sandbox BypassPatch nowKEVEPSS 27.97%Jul 3, 2024
- Medium5.3Twilio Authy Information Disclosure VulnerabilityPatch nowKEVEPSS 1.67%Jul 2, 2024
Sort