Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownnsqua simply_schedule_appointments Missing AuthorizationPatch nowKEVEPSS 1.98%Aug 8, 2022
- High8.2A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size.Check if you run itEPSS 4.39%Aug 5, 2022
- Critical9.8zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.Check this weekEPSS 19.24%Aug 5, 2022
- High8.0postgresql postgresql_jdbc_driver Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.35%Aug 3, 2022
- High7.5SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.Check this weekEPSS 23.57%Aug 3, 2022
- High7.5A vulnerability found in gnutls.Check if you run itEPSS 2.25%Aug 1, 2022
- Unknownideastocode Enable SVG, WebP, and ICO Upload Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Aug 1, 2022
- High7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).Check if you run itEPSS 0.89%Jul 29, 2022
- Medium6.1Possible cross-site scripting vulnerability in libxml after commit 960f0e2.Check if you run itEPSS 1.31%Jul 28, 2022
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.60%Jul 28, 2022
- High7.5nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case o…Check if you run itEPSS 8.87%Jul 27, 2022
- Medium5.5An issue was discovered in the Linux kernel through 5.18.14.Check if you run itEPSS 0.32%Jul 27, 2022
- Unknownslickremix feed_them_social Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.01%Jul 26, 2022
- Unknowntransposh transposh_wordpress_translation Missing AuthorizationPatch nowKEVEPSS 4.79%Jul 25, 2022
- High7.8io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP.Check if you run itEPSS 0.31%Jul 22, 2022
- Unknownprestashop prestashop Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.72%Jul 22, 2022
- Critical9.8Atlassian Questions For Confluence App Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 98.24%Jul 20, 2022
- High7.5In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled.Check if you run itEPSS 3.20%Jul 20, 2022
- UnknownGoogle Chrome Improper Input ValidationPatch nowKEVEPSS 1.14%Jul 20, 2022
- Medium6.5CVE-2022-21565 is listed by Vulnerability in the Java VM component of Oracle Database Server..Check if you run itEPSS 0.68%Jul 19, 2022
- High7.2Vulnerability in the Oracle Database - Enterprise Edition Recovery component of Oracle Database Server.Check if you run itEPSS 1.08%Jul 19, 2022
- High8.8CVE-2022-21510 is listed by Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server..Check if you run itEPSS 0.27%Jul 19, 2022
- Low2.7Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server.Check if you run itEPSS 0.89%Jul 19, 2022
- Critical9.8Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.87%Jul 19, 2022
- Medium6.5Google Chromium Intents Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 4.56%Jul 19, 2022
Sort