Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.Check if you run itEPSS 4.22%Jan 6, 2022
- High7.8Arm Mali GPU Kernel Driver Unspecified VulnerabilityPatch nowKEVEPSS 1.06%Jan 6, 2022
- Unknownsupportcandy supportcandy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.34%Jan 5, 2022
- UnknownGo Ethereum (Geth) Time-Difference Value Manipulation VulnerabilityPatch nowKEVEPSS 1.27%Jan 3, 2022
- High8.8In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too…Check if you run itEPSS 4.67%Jan 1, 2022
- High7.8Samsung Mobile Devices Use-After-Free VulnerabilityPatch nowKEVEPSS 0.39%Jan 1, 2022
- UnknownIn checkKeyIntent of AccountManagerService.java, there is a possible permission bypass.Check if you run itEPSS 0.16%Jan 1, 2022
- Unknownsynology diskstation_manager Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 76.72%Dec 23, 2021
- UnknownHCSEC-2021-34 - Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Golang’s net/http (CVE-2021-44716)Check if you run itEPSS 4.25%Dec 22, 2021
- Critical9.8thinkcmf thinkcmf Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 7.42%Dec 22, 2021
- UnknownFreePBX restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 Remote Code ExecutionPatch nowKEVEPSS 21.49%Dec 22, 2021
- UnknownApache log4j Improper Input ValidationPatch nowKEVEPSS 100.00%Dec 22, 2021
- High8.1Acclaim Systems USAHERDS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 17.58%Dec 21, 2021
- Unknownraspap raspap Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 17.45%Dec 21, 2021
- UnknownweDevs wp_user_frontend Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 17.12%Dec 21, 2021
- Unknownamentotech workreap Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 60.11%Dec 21, 2021
- High7.5Omnissa Workspace ONE Server-Side Request ForgeryPatch nowKEVEPSS 99.68%Dec 17, 2021
- Medium6.1Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 30.93%Dec 16, 2021
- Unknownblocksera image_hover_effects Improper Access ControlPatch nowKEVEPSS 6.53%Dec 16, 2021
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.28%Dec 15, 2021
- UnknownWindows WalletService Privilege EscalationPatch nowKEVEPSS 3.49%Dec 15, 2021
- UnknownMicrosoft Windows Untrusted Search PathPatch nowKEVEPSS 70.96%Dec 15, 2021
- UnknownSiemens simatic_pcs7 Untrusted Search PathPatch nowKEVEPSS 0.45%Dec 15, 2021
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 23.07%Dec 15, 2021
- UnknownMicrosoft Windows Win32k Keyboard Layout Privilege EscalationPatch nowKEVEPSS 14.56%Dec 15, 2021
Sort