Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- High8.8Tenda hg6_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.95%Jun 2, 2022
- Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.Check if you run itEPSS 1.36%Jun 2, 2022
- High7.5libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…Check if you run itEPSS 3.09%Jun 2, 2022
- High7.5libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server…Check if you run itEPSS 2.90%Jun 2, 2022
- High7.5The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host n…Check if you run itEPSS 2.52%Jun 2, 2022
- Medium5.3libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies.Check if you run itEPSS 2.79%Jun 2, 2022
- High8.1A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when is used together with .Check if you run itEPSS 3.81%Jun 2, 2022
- Medium6.5A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but ano…Check if you run itEPSS 4.10%Jun 2, 2022
- High7.5An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…Check if you run itEPSS 3.34%Jun 2, 2022
- Medium5.7An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials wh…Check if you run itEPSS 2.01%Jun 2, 2022
- Medium6.3An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem.Check if you run itEPSS 0.34%Jun 2, 2022
- High7.5Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.Check if you run itEPSS 1.13%Jun 1, 2022
- UnknownIn ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking.Check if you run itEPSS 0.14%Jun 1, 2022
- Unknownglpi-project barcode Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 52.66%May 31, 2022
- Unknownmontala resourcespace Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 77.89%May 31, 2022
- UnknownMicrosoft Exchange Server Spoofing VulnerabilityPatch nowKEVEPSS 93.50%May 31, 2022
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 85.40%May 31, 2022
- Unknowncodepress visitor_statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 38.30%May 31, 2022
- UnknownVMware Spring Framework Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 13.23%May 31, 2022
- UnknownvSphere Web Client (FLEX/Flash) Unauthorized Arbitrary File Read VulnerabilityPatch nowKEVEPSS 4.67%May 31, 2022
- Unknownsixapart movable_type Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 88.14%May 31, 2022
- High7.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.16%May 30, 2022
- High8.1An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making…Check if you run itEPSS 2.52%May 26, 2022
- High7.8A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_in…Check if you run itEPSS 0.37%May 26, 2022
Sort