Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs.Check if you run itEPSS 0.52%Jun 16, 2023
- High8.4Microsoft Streaming Service Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 21.62%Jun 13, 2023
- Critical9.8Microsoft SharePoint Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 99.98%Jun 13, 2023
- Medium4.3A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4 all versions…Check if you run itEPSS 0.95%Jun 13, 2023
- Medium5.5Android Pixel Information Disclosure VulnerabilityPatch nowKEVEPSS 0.27%Jun 13, 2023
- Low3.9VMware Tools Authentication Bypass VulnerabilityPatch nowKEVEPSS 13.64%Jun 13, 2023
- UnknownGeoServer 2 wps:Execute Request wps:LiteralData Remote Code ExecutionPatch nowKEVEPSS 44.82%Jun 12, 2023
- Critical9.8Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 85.69%Jun 12, 2023
- High7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel.Check if you run itEPSS 0.44%Jun 9, 2023
- Medium6.5D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon.Check if you run itEPSS 1.51%Jun 8, 2023
- Critical9.8Vmware Aria Operations for Networks Command Injection VulnerabilityPatch nowKEVEPSS 98.28%Jun 7, 2023
- UnknownElementor Pro plugin for WordPress update_page_option Function VulnerabilityPatch nowKEVEPSS 22.72%Jun 7, 2023
- Unknownlegalweb wp_dsgvo_tools Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 7, 2023
- Unknowncolorlib activello Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 65.34%Jun 7, 2023
- High8.8TP-Link Multiple Routers Command Injection VulnerabilityPatch nowKEVEPSS 41.61%Jun 6, 2023
- UnknownProgress MOVEit Transfer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.81%Jun 3, 2023
- Critical9.8Progress MOVEit Transfer SQL Injection VulnerabilityPatch nowKEVEPSS 99.93%Jun 1, 2023
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 37.86%Jun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.57%Jun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.55%Jun 1, 2023
- High7.5A vulnerability was found in openldap.Check if you run itEPSS 2.00%May 30, 2023
- UnknownKyverno vulnerable due to usage of insecure cipherCheck if you run itEPSS 0.20%May 30, 2023
- Medium6.5Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.Check this weekEPSS 75.36%May 30, 2023
- Medium4.7There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel.Check if you run itEPSS 0.19%May 26, 2023
- High7.5GitLab GitLab Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 71.64%May 26, 2023
Sort