Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all version…Check if you run itEPSS 0.79%Jun 11, 2024
- High7.8Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 25.22%Jun 11, 2024
- High7.0Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityPatch nowKEVEPSS 68.20%Jun 11, 2024
- High7.8Android Pixel Privilege Escalation VulnerabilityPatch nowKEVEPSS 2.99%Jun 11, 2024
- Critical9.8Langflow '/api/v1/custom_component' Remote Code ExecutionPatch nowKEVEPSS 63.67%Jun 10, 2024
- Critical9.8salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.69%Jun 10, 2024
- High7.8Android Kernel Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.70%Jun 10, 2024
- Unknownkyocera net_viewer Insufficiently Protected CredentialsPatch nowKEVEPSS 14.62%Jun 8, 2024
- UnknownARForms - Premium WordPress Form Builder Plugin for WordPress PHP Code Upload VulnerabilityPatch nowKEVEPSS 3.35%Jun 7, 2024
- High7.8Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 0.76%Jun 7, 2024
- Critical9.8PHP-CGI OS Command Injection VulnerabilityPatch nowKEVEPSS 99.99%Jun 7, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 74.00%Jun 6, 2024
- High7.5SolarWinds Serv-U Path Traversal VulnerabilityPatch nowKEVEPSS 99.61%Jun 6, 2024
- Unknownamauri wpmobile.app Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.66%Jun 6, 2024
- Unknowncode4recovery 12_step_meeting_list Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.58%Jun 6, 2024
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Jun 6, 2024
- Medium5.3Cisco finesse Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 22.64%Jun 5, 2024
- UnknownLogin/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress import_settings VulnerabilityPatch nowKEVEPSS 1.51%Jun 5, 2024
- Unknowngeneratepress generatepress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Jun 5, 2024
- Critical9.1StellarWP the_events_calendar Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.08%Jun 4, 2024
- Unknownbackupbliss backup_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.05%Jun 3, 2024
- High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityPatch nowKEVEPSS 99.94%May 31, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 99.48%May 31, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate propname buffe…Check if you run itEPSS 0.25%May 30, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_…Check if you run itEPSS 0.25%May 30, 2024
Sort