Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this funct…Check if you run itEPSS 0.26%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog…Check if you run itEPSS 0.27%Dec 27, 2024
- High7.8vfio/pci: Properly hide first-in-list PCIe extended capabilityCheck if you run itEPSS 0.26%Dec 27, 2024
- High7.8PCI: Fix use-after-free of slot->bus on hot removeCheck if you run itEPSS 0.24%Dec 27, 2024
- Medium6.9DrayTek Vigor Routers OS Command Injection VulnerabilityPatch nowKEVEPSS 98.16%Dec 27, 2024
- High8.7Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityPatch nowKEVEPSS 29.12%Dec 27, 2024
- Low3.6shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistic…Check if you run itEPSS 0.43%Dec 26, 2024
- UnknownD-Link DIR-845L HNAP OS Command InjectionPatch nowKEVEPSS 6.46%Dec 26, 2024
- UnknownD-Link GO-RT-AC750 HNAP OS Command InjectionPatch nowKEVEPSS 11.39%Dec 26, 2024
- Medium6.7In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled o…Check if you run itEPSS 0.20%Dec 24, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater t…Check if you run itEPSS 0.25%Dec 24, 2024
- UnknownJeecgBoot /onlDragDatasetHead/getTotalData SQL Injection VulnerabilityPatch nowKEVEPSS 50.30%Dec 24, 2024
- UnknownAltenergy Power Control Software SQL InjectionPatch nowKEVEPSS 3.67%Dec 24, 2024
- Unknownsalesagility suitecrm Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.00%Dec 24, 2024
- UnknownCassia Gateway Firmware XC1000 and XC2000 queueUrl Parameter VulnerabilityPatch nowKEVEPSS 61.08%Dec 21, 2024
- Critical9.8Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 8.97%Dec 20, 2024
- Unknownfiberhome an5506-01-a_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.08%Dec 20, 2024
- High7.8astro astro Storage of File with Sensitive Data Under Web RootPatch nowKEVEPSS 1.54%Dec 19, 2024
- High8.8Digiever DS-2105 Pro Missing Authorization VulnerabilityPatch nowKEVEPSS 96.92%Dec 19, 2024
- Unknownlenovo diagnostics Out-of-bounds WritePatch nowKEVEPSS 4.25%Dec 19, 2024
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
- High7.2BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityPatch nowKEVEPSS 32.22%Dec 18, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method…Check if you run itEPSS 0.42%Dec 17, 2024
- Critical9.8BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityPatch nowKEVEPSS 87.43%Dec 16, 2024
- Unknownmimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.31%Dec 16, 2024
Sort