Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows COM+ Event System Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.89%Oct 11, 2022
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Oct 10, 2022
- Medium5.5mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.Check if you run itEPSS 0.92%Oct 9, 2022
- High7.8hancom hancom_office_2020 Buffer Underwrite ('Buffer Underflow')Patch nowKEVEPSS 0.53%Oct 7, 2022
- Critical9.8gajira-create GitHub action vulnerable to arbitrary code executionCheck if you run itEPSS 2.87%Oct 7, 2022
- Unknownmsi afterburner Out-of-bounds ReadPatch nowKEVEPSS 19.84%Oct 4, 2022
- High7.8Cisco SD-WAN Path Traversal VulnerabilityPatch nowKEVEPSS 12.47%Sep 30, 2022
- Medium4.7roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a rep…Check if you run itEPSS 0.22%Sep 30, 2022
- Medium4.2drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB de…Check if you run itEPSS 0.35%Sep 30, 2022
- High8.0Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Sep 29, 2022
- High8.8Microsoft Exchange Server Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 99.96%Sep 29, 2022
- Unknownvtiger vtiger_crm Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.84%Sep 28, 2022
- Medium4.7A race condition flaw was found in the Linux kernel sound subsystem due to improper locking.Check if you run itEPSS 0.32%Sep 27, 2022
- High8.8Google Chromium Network Service Use-After-Free VulnerabilityPatch nowKEVEPSS 24.93%Sep 26, 2022
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 95.48%Sep 25, 2022
- Low3.7When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make t…Check if you run itEPSS 3.84%Sep 23, 2022
- Medium6.1Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 47.91%Sep 21, 2022
- High7.0mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.Check if you run itEPSS 0.49%Sep 21, 2022
- Medium5.5In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.Check if you run itEPSS 0.83%Sep 21, 2022
- Lowpersonnummer/dart vulnerable to Improper Input ValidationCheck if you run itEPSS 0.51%Sep 19, 2022
- Critical9.8The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins.Check if you run itEPSS 1.58%Sep 19, 2022
- Critical9.8Teclib GLPI Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.85%Sep 19, 2022
- Medium5.5drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a mems…Check if you run itEPSS 0.30%Sep 18, 2022
- Unknownprofanity_project profanity Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.49%Sep 18, 2022
- Critical9.8Sophos Firewall Code Injection VulnerabilityPatch nowKEVEPSS 98.91%Sep 16, 2022
Sort