Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.Check if you run itEPSS 0.92%Jul 31, 2023
- Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.Check if you run itEPSS 3.05%Jul 31, 2023
- Medium5.5A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem).Check if you run itEPSS 0.25%Jul 25, 2023
- Medium5.5A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem).Check if you run itEPSS 0.47%Jul 25, 2023
- High7.8An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.29%Jul 21, 2023
- Medium6.5D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon.Check if you run itEPSS 1.51%Jun 8, 2023
- Medium5.5A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device.Check if you run itEPSS 0.37%Dec 22, 2022
- UnknownContainer-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBodyOpen the advisorySep 20, 2022
- UnknownUse-of-uninitialized-value in SfxEntry::test_conditionOpen the advisorySep 11, 2022
- UnknownHeap-use-after-free in mk_event_timeout_destroyOpen the advisorySep 4, 2022
- UnknownHeap-buffer-overflow in sqlite3VdbeExecOpen the advisoryAug 21, 2022
- UnknownHeap-buffer-overflow in dynapi_set_helperOpen the advisoryAug 15, 2022
- UnknownHeap-buffer-overflow in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<chaOpen the advisoryAug 6, 2022
- UnknownHeap-double-free in dwg_free_common_entity_dataOpen the advisoryJul 30, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.Check this weekEPSS 31.50%Jul 7, 2022
- UnknownHeap-use-after-free in draco::Metadata::AddSubMetadataOpen the advisoryJul 14, 2020
- UnknownUNKNOWN READ in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_traitOpen the advisoryJul 14, 2020
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…Check if you run itEPSS 9.67%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…Check this weekEPSS 10.57%Feb 25, 2016
- Medium5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security…Check this weekEPSS 18.38%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…Check this weekEPSS 12.55%Feb 25, 2016
- Medium6.1Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and cond…Check if you run itEPSS 6.87%Jan 13, 2016
- Medium5.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key ExcCheck if you run itEPSS 2.90%Jan 9, 2016
- High7.5Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17,…Check this weekEPSS 10.34%Nov 13, 2015
- Critical9.3Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Offi…Check this weekEPSS 20.97%Nov 11, 2015