Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft authenticator Improper AuthenticationPatch nowKEVEPSS 1.27%Dec 5, 2024
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 23.22%Dec 5, 2024
- Unknownchamilo chamilo Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 76.08%Dec 5, 2024
- Unknownsuperwebmailer superwebmailer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Dec 5, 2024
- Unknownphonepe phonepe Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 37.67%Dec 5, 2024
- Unknownseiko-sol skybridge_mb-a200_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 1.74%Dec 5, 2024
- Unknownwavlink wl-wn531p3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.52%Dec 5, 2024
- Unknownruijienetworks reyeeos Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.14%Dec 5, 2024
- UnknownAcmailer and Acmailer DB Survey Function VulnerabilityPatch nowKEVEPSS 7.41%Dec 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data.Check if you run itEPSS 0.24%Dec 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_pag…Check if you run itEPSS 0.55%Dec 4, 2024
- Medium6.5In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode mo…Check if you run itEPSS 0.24%Dec 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: sync_linked_regs() must preserve subreg_def Range propagation must not affect subreg_def marks…Check if you run itEPSS 0.23%Dec 4, 2024
- High7.8Linux Kernel Out-of-Bounds Access VulnerabilityPatch nowKEVEPSS 4.12%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Arbitrary OS Command ExecutionPatch nowKEVEPSS 0.57%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Admin Account Arbitrary OS Command ExecutionPatch nowKEVEPSS 0.90%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Guest Account Credential DisclosurePatch nowKEVEPSS 0.47%Dec 4, 2024
- UnknownKubePi JWT Token Login Bypass VulnerabilityPatch nowKEVEPSS 8.39%Dec 3, 2024
- Critical9.1mongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.98%Dec 2, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk->sk_forward_alloc Syzkaller reported this warning: ------------[ cut…Check if you run itEPSS 0.59%Dec 2, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e.Check if you run itEPSS 0.53%Dec 2, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number of Zen4 client SoCs advertise…Check if you run itEPSS 0.28%Dec 2, 2024
- Unknownfujitsu esprimo_d556\/2_firmware Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 1.84%Nov 29, 2024
- Critical9.8Microsoft Partner Center Improper Access Control VulnerabilityPatch nowKEVEPSS 1.30%Nov 26, 2024
- Critical9.8ProjectSend Improper Authentication VulnerabilityPatch nowKEVEPSS 91.85%Nov 26, 2024
Sort