Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownthimpress learnpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.06%Jan 20, 2023
- Unknownthimpress learnpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.27%Jan 20, 2023
- UnknownWpmet elements_kit_elementor_addons Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.63%Jan 19, 2023
- High7.8Adobe Acrobat and Reader Use-After-Free VulnerabilityPatch nowKEVEPSS 59.43%Jan 18, 2023
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.75%Jan 18, 2023
- Medium6.3Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server.Check if you run itEPSS 0.46%Jan 18, 2023
- Medium4.3Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server.Check if you run itEPSS 0.47%Jan 18, 2023
- Unknownninjaforms ninja_forms Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.89%Jan 18, 2023
- Medium5.5In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system cr…Check if you run itEPSS 1.04%Jan 17, 2023
- High7.5A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent.Check if you run itEPSS 3.58%Jan 17, 2023
- High7.5Oracle WebLogic Server Unspecified VulnerabilityPatch nowKEVEPSS 99.90%Jan 17, 2023
- UnknownWindows SMB Remote Code ExecutionPatch nowKEVEPSS 38.05%Jan 17, 2023
- UnknownElastic Endpoint Security for Windows Ransomware Canaries Features Local Privilege EscalationPatch nowKEVEPSS 0.23%Jan 17, 2023
- UnknownGoogle Chrome Use After FreePatch nowKEVEPSS 0.76%Jan 17, 2023
- Unknownstrangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 92.46%Jan 14, 2023
- High7.8In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.Check if you run itEPSS 0.31%Jan 13, 2023
- UnknownCitrix ShareFile Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.12%Jan 13, 2023
- Medium6.6A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver.Check if you run itEPSS 0.60%Jan 12, 2023
- Medium5.5atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers c…Check if you run itEPSS 0.28%Jan 12, 2023
- Medium5.5cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion…Check if you run itEPSS 0.34%Jan 12, 2023
- UnknownApache commons_text Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 99.93%Jan 12, 2023
- Unknownnortekcontrol emerge_e3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.59%Jan 12, 2023
- Unknownithemes backupbuddy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 63.76%Jan 12, 2023
- Unknownwavlink wl-wn535k2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 30.19%Jan 12, 2023
- UnknownEclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5 Security BypassPatch nowKEVEPSS 99.33%Jan 12, 2023
Sort