Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Service Location Protocol (SLP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 63.98%Apr 25, 2023
- High8.8Arbitrary command injection in embano1/wipCheck if you run itEPSS 3.73%Apr 24, 2023
- Medium6.5An issue was discovered in libxml2 before 2.10.4.Check if you run itEPSS 1.31%Apr 24, 2023
- Medium6.5In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault.Check if you run itEPSS 1.24%Apr 24, 2023
- Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityPatch nowKEVEPSS 99.28%Apr 24, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 98.15%Apr 24, 2023
- Medium5.5An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2.Check if you run itEPSS 0.38%Apr 24, 2023
- Unknownkeepass keepass Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 3.69%Apr 24, 2023
- High7.5PaperCut NG/MF Improper Authentication VulnerabilityPatch nowKEVEPSS 78.05%Apr 20, 2023
- High7.2Strapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 70.60%Apr 19, 2023
- Medium4.9Strapi Cleartext Storage of Sensitive Information VulnerabilityPatch nowKEVEPSS 4.11%Apr 19, 2023
- High8.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check this weekEPSS 77.75%Apr 19, 2023
- Medium6.8CVE-2023-21934 is listed by Vulnerability in the Java VM component of Oracle Database Server..Check if you run itEPSS 0.54%Apr 18, 2023
- Critical9.8PaperCut MF/NG Improper Access Control VulnerabilityPatch nowKEVEPSS 100.00%Apr 18, 2023
- Unknowngocloud s2a_wl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.85%Apr 18, 2023
- High8.8Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositorie…Check if you run itEPSS 2.07%Apr 17, 2023
- Low3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger).Check if you run itEPSS 0.43%Apr 14, 2023
- High7.8ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo data…Check if you run itEPSS 0.98%Apr 14, 2023
- High7.2Cisco Small Business RV Series Routers Command Injection VulnerabilityPatch nowKEVEPSS 54.11%Apr 13, 2023
- Unknowncyr_to_lat_project cyr_to_lat Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.77%Apr 13, 2023
- Critical9.8idnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.02%Apr 12, 2023
- Critical9.6Google Chrome Skia Integer Overflow VulnerabilityPatch nowKEVEPSS 5.74%Apr 12, 2023
- High7.0Microsoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.67%Apr 11, 2023
- High7.4A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versio…Check if you run itEPSS 0.26%Apr 11, 2023
- High7.8A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0).Check if you run itEPSS 0.22%Apr 11, 2023
Sort