Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to tak…Check if you run itEPSS 1.05%Feb 9, 2023
- High7.5A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1.Check if you run itEPSS 1.71%Feb 9, 2023
- High7.5A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header.Check if you run itEPSS 2.28%Feb 9, 2023
- High8.8A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments.Check if you run itEPSS 2.15%Feb 9, 2023
- High7.5A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1.Check if you run itEPSS 1.70%Feb 9, 2023
- High7.5A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1.Check if you run itEPSS 1.26%Feb 9, 2023
- Medium5.9A use after free vulnerability exists in curl <7.87.0.Check if you run itEPSS 2.71%Feb 9, 2023
- Medium5.5Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log.Check if you run itEPSS 0.18%Feb 9, 2023
- Critical9.8The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters.Check if you run itEPSS 0.51%Feb 9, 2023
- Critical9.8A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical.Check if you run itEPSS 0.61%Feb 9, 2023
- High7.8Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allo…Check if you run itEPSS 0.30%Feb 8, 2023
- Medium6.5formula is a math and string formula parser.Check if you run itEPSS 0.61%Feb 8, 2023
- High7.4There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.Check this weekEPSS 69.29%Feb 8, 2023
- High7.5The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.Check if you run itEPSS 5.02%Feb 8, 2023
- High7.5The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.Check this weekEPSS 28.59%Feb 8, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.Check this weekEPSS 23.51%Feb 8, 2023
- UnknownHCSEC-2023-02 - Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Go’s net/http (CVE-2022-41717)Check if you run itEPSS 6.08%Feb 8, 2023
- Unknownwickedplugins wicked_folders Missing AuthorizationPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_save_sort_order Authorization BypassPatch nowKEVEPSS 0.60%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_save_folder Authorization BypassPatch nowKEVEPSS 0.59%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_delete_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders Plugin for WordPress ajax_edit_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_clone_folder Authorization BypassPatch nowKEVEPSS 0.58%Feb 8, 2023
- Unknownwickedplugins wicked_folders Missing AuthorizationPatch nowKEVEPSS 0.58%Feb 8, 2023
- UnknownWicked Folders plugin for WordPress ajax_move_object function Authorization BypassPatch nowKEVEPSS 0.60%Feb 8, 2023
Sort