Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3A flaw was found in libsoup.Check if you run itEPSS 0.44%Apr 29, 2025
- High7.5A flaw was found in the mod_auth_openidc module for Apache httpd.Check if you run itEPSS 1.58%Apr 29, 2025
- High8.6In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame Andrew and Nikolay reported connectivity issues with CiCheck if you run itEPSS 0.33%Apr 29, 2025
- High7.5When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access (douCheck if you run itEPSS 2.25%Apr 29, 2025
- Medium4.3The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_pluginCheck if you run itEPSS 0.30%Apr 29, 2025
- Medium6.4The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all veCheck if you run itEPSS 0.28%Apr 29, 2025
- Low3.3libsnowflakeclient is the Snowflake Connector for C/C++.Check if you run itEPSS 0.17%Apr 29, 2025
- UnknownCVE-2018-13372Open the advisoryApr 29, 2025
- UnknownCVE-2017-7740Open the advisoryApr 29, 2025
- High8.8A use-after-free issue was addressed with improved memory management.Check if you run itEPSS 1.30%Apr 29, 2025
- Medium5.7The issue was addressed with improved checks.Check if you run itEPSS 0.30%Apr 29, 2025
- Medium5.7A null pointer dereference was addressed with improved input validation.Check if you run itEPSS 0.30%Apr 29, 2025
- Medium5.7This issue was addressed by removing the vulnerable code.Check if you run itEPSS 0.33%Apr 29, 2025
- Medium5.4An access issue was addressed with improved access restrictions.Check if you run itEPSS 0.51%Apr 29, 2025
- High7.7An authentication issue was addressed with improved state management.Check if you run itEPSS 0.36%Apr 29, 2025
- Medium5.5A null pointer dereference was addressed with improved input validation.Check if you run itEPSS 0.19%Apr 29, 2025
- Medium6.5The issue was addressed with improved checks.Check if you run itEPSS 0.39%Apr 29, 2025
- Medium6.5An integer overflow was addressed with improved input validation.Check if you run itEPSS 0.38%Apr 29, 2025
- Medium6.5A type confusion issue was addressed with improved checks.Check if you run itEPSS 0.38%Apr 29, 2025
- High8.8A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands vCheck if you run itEPSS 0.49%Apr 29, 2025
- UnknownMDaemon Email Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Apr 29, 2025
- High8.8In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/extension/graphql) of Zimbra webmail dueCheck if you run itEPSS 0.31%Apr 29, 2025
- Critical9.8An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the _modifyPosition functionCheck if you run itEPSS 0.51%Apr 29, 2025
- Critical9.8Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php.Check if you run itEPSS 0.42%Apr 29, 2025
- High7.5An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and pasCheck if you run itEPSS 0.41%Apr 29, 2025
Sort