Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownThe Ultimate Member WordPress plugin before 2.6.7 Privilege EscalationPatch nowKEVEPSS 72.31%Jun 29, 2023
- UnknownHCSEC-2023-19 - Terraform Enterprise, Docker Engine, and Go’s CVE-2023-24540Check if you run itEPSS 1.56%Jun 28, 2023
- High7.8A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.67%Jun 28, 2023
- UnknownFavethemes Houzez Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.68%Jun 28, 2023
- UnknownWin32k Elevation of PrivilegePatch nowKEVEPSS 5.93%Jun 28, 2023
- UnknownLearnDash LMS plugin for WordPress Insecure Direct Object References VulnerabilityPatch nowKEVEPSS 2.23%Jun 27, 2023
- UnknownHeap-use-after-free in mk_event_timeout_destroyOpen the advisoryJun 26, 2023
- Critical9.8The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.Check if you run itEPSS 1.02%Jun 25, 2023
- Medium4.4A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel.Check if you run itEPSS 0.28%Jun 23, 2023
- UnknownAbandoned Cart Lite for WooCommerce plugin for WordPres Authentication Bypass VulnerabilityPatch nowKEVEPSS 42.54%Jun 23, 2023
- Unknownwp-experts protect_wp_admin URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.73%Jun 22, 2023
- UnknownTenda ax3_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.77%Jun 22, 2023
- Unknownapsystems ecu-r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 76.60%Jun 22, 2023
- Unknownintelbras wifiber_120ac_inmesh_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 35.03%Jun 22, 2023
- Unknowncommscope arris_tr3300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.07%Jun 22, 2023
- UnknownVMware workstation Uncontrolled Search Path ElementPatch nowKEVEPSS 9.03%Jun 22, 2023
- High7.5If the quota is reached on a BIND 9 resolver configured with both and , a sequence of serve-stale-related lookups could cause to loop and terminate unexpectedly due to…Check if you run itEPSS 2.45%Jun 21, 2023
- High7.5A instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option ( ) enabled can be remotely…Check if you run itEPSS 0.88%Jun 21, 2023
- High7.5Every instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers.Check if you run itEPSS 3.70%Jun 21, 2023
- High8.8Apple Multiple Products WebKit Type Confusion VulnerabilityPatch nowKEVEPSS 23.97%Jun 21, 2023
- High7.8Apple Multiple Products Integer Overflow VulnerabilityPatch nowKEVEPSS 51.52%Jun 21, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.83%Jun 20, 2023
- Critical9.8Zyxel Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 82.26%Jun 19, 2023
- UnknownMStore API plugin for WordPress Priviledge Escalation VulnerabilityPatch nowKEVEPSS 2.89%Jun 19, 2023
- High7.0An issue was discovered in the Linux kernel through 6.3.8.Check if you run itEPSS 0.19%Jun 18, 2023
Sort