Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.8Cisco ASA and FTD Denial-of-Service VulnerabilityPatch nowKEVEPSS 15.87%Oct 23, 2024
- UnknownSpring Framework WebMvc.fn or WebFlux.fn Path Traversal VulnerabilityPatch nowKEVEPSS 14.72%Oct 22, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 ("igb: Fix igb_down hung…Check if you run itEPSS 0.26%Oct 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be…Check if you run itEPSS 0.28%Oct 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm, slub: avoid zeroing kmalloc redzone Since commit 946fa0dbf2d8 ("mm/slub: extend redzone check t…Check if you run itEPSS 0.24%Oct 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks: Process…Check if you run itEPSS 0.24%Oct 21, 2024
- UnknownCisco hyperflex_hx_data_platform URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Oct 21, 2024
- UnknownFreemius SDK _get_debug_log, _get_db_option, and the _set_db_option Functions VulnerabilityPatch nowKEVEPSS 0.44%Oct 15, 2024
- UnknownMapplic and Mapplic Lite plugins for WordPress SVG File Server Side Request Forgery VulnerabilityPatch nowKEVEPSS 1.18%Oct 15, 2024
- UnknownD-Link dir-816_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.10%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- UnknownCups-browsed INADDR_ANY IPP Request VulnerabilityPatch nowKEVEPSS 50.60%Sep 27, 2024
- UnknownGradio save_url_to_cache Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 37.11%Sep 25, 2024
- UnknownSPIP porte_plume Plugin Arbitrary PHP Execution VulnerabilityPatch nowKEVEPSS 90.05%Sep 22, 2024
- Unknownmemberhero member_hero Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.44%Sep 19, 2024
- Unknownwavemaker wavemarker_studio Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 27.96%Sep 19, 2024
- UnknownAtlassian oauth Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 71.60%Sep 19, 2024
- Unknowndnnsoftware DotNetNuke (DNN) Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 12.54%Sep 19, 2024
- Unknownumbraco umbraco Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 11.15%Sep 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface…Check if you run itEPSS 0.28%Sep 18, 2024
- UnknownWordPress wordpress Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 3.43%Sep 18, 2024
- UnknownTenda f3_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 35.25%Sep 18, 2024
- Critical9.1PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass VulnerabilityPatch nowKEVEPSS 58.79%Sep 17, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 75.52%Sep 12, 2024
- Medium6.5When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fai…Check if you run itEPSS 0.82%Sep 11, 2024
Sort