Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.2drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB de…Check if you run itEPSS 0.35%Sep 30, 2022
- High8.0Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Sep 29, 2022
- High8.8Microsoft Exchange Server Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 99.96%Sep 29, 2022
- Unknownvtiger vtiger_crm Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.84%Sep 28, 2022
- Medium4.7A race condition flaw was found in the Linux kernel sound subsystem due to improper locking.Check if you run itEPSS 0.32%Sep 27, 2022
- High8.8Google Chromium Network Service Use-After-Free VulnerabilityPatch nowKEVEPSS 24.93%Sep 26, 2022
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 95.48%Sep 25, 2022
- Low3.7When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make t…Check if you run itEPSS 3.84%Sep 23, 2022
- Medium6.1Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 46.73%Sep 21, 2022
- High7.0mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.Check if you run itEPSS 0.49%Sep 21, 2022
- Medium5.5In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.Check if you run itEPSS 0.83%Sep 21, 2022
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.51%Sep 19, 2022
- Critical9.8The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins.Check if you run itEPSS 1.58%Sep 19, 2022
- Critical9.8Teclib GLPI Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.85%Sep 19, 2022
- Medium5.5drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a mems…Check if you run itEPSS 0.30%Sep 18, 2022
- Unknownprofanity_project profanity Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.49%Sep 18, 2022
- Critical9.8Sophos Firewall Code Injection VulnerabilityPatch nowKEVEPSS 98.91%Sep 16, 2022
- High8.1libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.Check if you run itEPSS 2.25%Sep 14, 2022
- Unknownunisharp laravel_filemanager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.18%Sep 14, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 4.38%Sep 14, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 1.23%Sep 14, 2022
- High7.2Trend Micro Apex One and Apex One as a Service Improper Validation VulnerabilityPatch nowKEVEPSS 3.29%Sep 13, 2022
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 28.27%Sep 13, 2022
- UnknownWordPress WPGateway Plugin Privilege EscalationPatch nowKEVEPSS 9.21%Sep 13, 2022
- Critical9.8cuppacms cuppacms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.66%Sep 12, 2022
Sort