Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slCheck if you run itEPSS 0.28%Nov 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to that in Commi…Check if you run itEPSS 0.62%Nov 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In the previous implementation, vf_state is allocate…Check if you run itEPSS 0.22%Nov 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110…Check if you run itEPSS 0.24%Nov 19, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipul…Check if you run itEPSS 0.24%Nov 19, 2024
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 21.95%Nov 19, 2024
- High8.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 9.85%Nov 19, 2024
- UnknownWindows CSC Service Elevation of Privilege VulnerabilityPatch nowKEVEPSS 9.38%Nov 19, 2024
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 1.22%Nov 19, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityPatch nowKEVEPSS 93.75%Nov 18, 2024
- High7.5Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityPatch nowKEVEPSS 1.72%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.79%Nov 18, 2024
- High7.5A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly creat…Check if you run itEPSS 0.49%Nov 17, 2024
- Medium5.3MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 33.26%Nov 15, 2024
- UnknownFortinet forticlient Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 0.14%Nov 15, 2024
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 28.39%Nov 14, 2024
- Unknownreally-simple-plugins really_simple_security Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 82.22%Nov 14, 2024
- UnknownChartify WordPress Chart Plugin For WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 4.81%Nov 14, 2024
- UnknownD-Link dns-320_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 97.54%Nov 13, 2024
- Critical9.8A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through…Check if you run itEPSS 0.60%Nov 12, 2024
- Medium5.1Citrix Session Recording Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 21.09%Nov 12, 2024
- Medium5.1Citrix Session Recording Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.48%Nov 12, 2024
- High8.8Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityPatch nowKEVEPSS 14.18%Nov 12, 2024
- Medium6.5Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 84.27%Nov 12, 2024
- Critical9.8gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.Check if you run itEPSS 1.51%Nov 11, 2024
Sort