Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WE…Check if you run itEPSS 0.44%May 9, 2023
- Medium6.1Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to u…Check if you run itEPSS 0.39%May 9, 2023
- High7.5An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.Check if you run itEPSS 2.45%May 9, 2023
- High7.8Microsoft Win32K Privilege Escalation VulnerabilityPatch nowKEVEPSS 41.19%May 9, 2023
- UnknownSecure Boot Security Feature Bypass VulnerabilityPatch nowKEVEPSS 11.82%May 9, 2023
- High7.8Linux Kernel Use After FreePatch nowKEVEPSS 13.44%May 8, 2023
- High8.8Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface.Check if you run itEPSS 1.60%May 8, 2023
- Critical9.8Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary code via ServerOptions::pid_file.Check if you run itEPSS 1.52%May 8, 2023
- UnknownFatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 "cmuser" Backdoor AccountPatch nowKEVEPSS 5.47%May 5, 2023
- Critical9.8e-office e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 32.90%May 4, 2023
- High8.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13,…Check if you run itEPSS 0.89%May 3, 2023
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.Check if you run itEPSS 0.27%May 3, 2023
- Medium4.3Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscat…Check if you run itEPSS 0.80%May 3, 2023
- Medium4.3Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page.Check if you run itEPSS 0.80%May 3, 2023
- UnknownSPIP before 4.2.1 Remote Code ExecutionPatch nowKEVEPSS 99.68%May 3, 2023
- Unknownawesomemotive easy_digital_downloads Improper AuthenticationPatch nowKEVEPSS 3.10%May 2, 2023
- UnknownWindows Network File System Remote Code ExecutionPatch nowKEVEPSS 72.56%May 2, 2023
- Unknownrockwellautomation connected_component_workbench Deserialization of Untrusted DataPatch nowKEVEPSS 11.10%May 2, 2023
- Unknownthoughtworks gocd Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 27.36%May 2, 2023
- UnknownApache openoffice Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 50.56%May 2, 2023
- Unknownhitachi vantara_pentaho Improper AuthenticationPatch nowKEVEPSS 51.65%May 2, 2023
- Unknownmalwarefox anti-malware Improper Input ValidationPatch nowKEVEPSS 1.06%May 2, 2023
- High8.8Apple Multiple Products WebKit Use-After-Free VulnerabilityPatch nowKEVEPSS 12.17%May 1, 2023
- Medium6.5Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 14.29%May 1, 2023
- High7.8qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.Check if you run itEPSS 0.60%Apr 28, 2023
Sort