Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 81.83%Apr 11, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols…Check if you run itEPSS 0.31%Apr 10, 2024
- High8.8A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0…Check if you run itEPSS 0.75%Apr 9, 2024
- UnknownForminator Contact Form, Payment Form & Custom Form Builder plugin for WordPress Stored Cross Site Scripting VulnerabilityPatch nowKEVEPSS 0.36%Apr 9, 2024
- High8.8Microsoft SmartScreen Prompt Security Feature Bypass VulnerabilityPatch nowKEVEPSS 45.15%Apr 9, 2024
- UnknownProxy Driver Spoofing VulnerabilityPatch nowKEVEPSS 4.85%Apr 9, 2024
- Medium5.9Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit ce…Check this weekEPSS 52.42%Apr 8, 2024
- UnknownWordPress 5 Stars Rating Funnel Plugin Arbitrary Content DeletionPatch nowKEVEPSS 0.58%Apr 8, 2024
- Unknownchiyu-tech bf-430_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 79.61%Apr 8, 2024
- UnknownIBM bigfix_platform Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 22.55%Apr 8, 2024
- UnknownIgnite Realtime Openfire Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.94%Apr 8, 2024
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.10%Apr 6, 2024
- UnknownNextChat Internal HTTP Endpoints SSRF and XSSPatch nowKEVEPSS 83.16%Apr 6, 2024
- UnknownCitrix application_delivery_controller_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 23.46%Apr 6, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the…Check if you run itEPSS 0.24%Apr 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx signalin…Check if you run itEPSS 0.25%Apr 5, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx ma…Check if you run itEPSS 0.20%Apr 5, 2024
- Unknownchurch_admin_project church_admin Missing AuthorizationPatch nowKEVEPSS 0.34%Apr 5, 2024
- Unknownchurch_admin_project church_admin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.63%Apr 5, 2024
- UnknownMasteriyo - LMS Plugin Privilege EscalationPatch nowKEVEPSS 2.09%Apr 5, 2024
- Medium5.3nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.Check this weekEPSS 84.96%Apr 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter syzbot reported the following uninit…Check if you run itEPSS 0.24%Apr 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIG_DMA_API_DEBUG_SG resul…Check if you run itEPSS 0.23%Apr 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index With numa balancing on, when a…Check if you run itEPSS 0.24%Apr 4, 2024
- UnknownAdobe commerce Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.69%Apr 4, 2024
Sort