Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all v…Check if you run itEPSS 0.74%Sep 10, 2024
- High7.5Apache OFBiz Forced Browsing VulnerabilityPatch nowKEVEPSS 99.98%Sep 4, 2024
- Unknownjournyx journyx Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 32.92%Sep 4, 2024
- Critical10.0HP intelligent_management_center Deserialization of Untrusted DataPatch nowKEVEPSS 0.96%Aug 28, 2024
- UnknownD-Link DIR-825 R1 Devices Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.25%Aug 28, 2024
- Critical10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Aug 23, 2024
- UnknownLiteLLM Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 35.32%Aug 22, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvme_map_data() is called when r…Check if you run itEPSS 0.25%Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped…Check if you run itEPSS 0.27%Aug 14, 2024
- UnknownSpring Security OAuth response_type Parameter VulnerabilityPatch nowKEVEPSS 79.18%Aug 14, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-index…Check if you run itEPSS 0.25%Jul 29, 2024
- UnknownApache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 84.51%Jul 25, 2024
- UnknownParsec Automation TrackSYS 11.x.x /TS/export/pagedefinition VulnerabilityPatch nowKEVEPSS 2.04%Jul 24, 2024
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.45%Jul 22, 2024
- Unknownthinkadmin thinkadmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.33%Jul 21, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb9015280d ("NF…Check if you run itEPSS 0.62%Jul 16, 2024
- Unknownavertx hd838_firmware Observable DiscrepancyPatch nowKEVEPSS 1.38%Jul 16, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hanging tasks…Check if you run itEPSS 0.29%Jul 12, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs.Check if you run itEPSS 0.30%Jul 12, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a call to imp…Check if you run itEPSS 0.30%Jul 12, 2024
- Critical9.9Gogs Gogs Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 7.74%Jul 4, 2024
- Medium5.3Twilio Authy Information Disclosure VulnerabilityPatch nowKEVEPSS 1.67%Jul 2, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 1, 2024
- UnknownQuest kace_systems_management Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.55%Jun 29, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is racy, an in…Check if you run itEPSS 0.25%Jun 24, 2024
Sort