Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownbitrix24 bitrix24 Improper Input ValidationPatch nowKEVEPSS 20.78%Mar 7, 2023
- Medium6.1sigb pmb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.17%Mar 6, 2023
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.47%Mar 6, 2023
- High8.6A flaw was found in the c-ares package.Check if you run itEPSS 1.22%Mar 6, 2023
- High7.8systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" com…Check if you run itEPSS 1.05%Mar 3, 2023
- Unknown10Web Map Builder for Google Maps WordPress Plugin AJAX SQL InjectionPatch nowKEVEPSS 3.91%Mar 3, 2023
- Medium6.1Cisco Identity Services Engine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.74%Mar 1, 2023
- UnknownSecure Boot Security Feature BypassPatch nowKEVEPSS 8.63%Mar 1, 2023
- Medium5.5In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object.Check if you run itEPSS 0.24%Feb 28, 2023
- Medium5.9GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_…Check if you run itEPSS 1.25%Feb 28, 2023
- Critical9.8Certain Tenda products are vulnerable to command injection.Check if you run itEPSS 2.46%Feb 27, 2023
- High7.1In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.Check if you run itEPSS 0.61%Feb 26, 2023
- UnknownWP Meta SEO WordPress plugin AJAX actions VulnerabilityPatch nowKEVEPSS 0.71%Feb 24, 2023
- UnknownAll in One SEO Pack plugin for WordPress Stored Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 2.53%Feb 24, 2023
- High7.5A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations th…Check if you run itEPSS 2.21%Feb 23, 2023
- High7.5A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://n…Check if you run itEPSS 2.02%Feb 23, 2023
- High8.8A prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an attacker to a RCE under the admin account.Check if you run itEPSS 0.98%Feb 23, 2023
- Medium6.5An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server…Check if you run itEPSS 1.74%Feb 23, 2023
- Medium6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs ar…Check if you run itEPSS 0.88%Feb 23, 2023
- Critical9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.Check if you run itEPSS 0.90%Feb 23, 2023
- UnknownFaveThemes Houzez Priviledge EscalationPatch nowKEVEPSS 2.73%Feb 23, 2023
- UnknownFaveThemes Houzez Login Register Priviledge EscalationPatch nowKEVEPSS 2.73%Feb 23, 2023
- High7.5A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.Check if you run itEPSS 1.89%Feb 22, 2023
- Medium5.4A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticated users to injec…Check if you run itEPSS 0.43%Feb 22, 2023
- Medium5.4A vulnerability was found in SourceCodester Simple Food Ordering System 1.0.Check if you run itEPSS 2.69%Feb 18, 2023
Sort