Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownZyxel NAS setCookie Crafted HTTP POST VulnerabilityPatch nowKEVEPSS 86.20%Jun 24, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the request…Check if you run itEPSS 0.24%Jun 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid1…Check if you run itEPSS 0.20%Jun 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: add a proper sanity check for endpoints Syzkaller reports [1] hitting a warning whi…Check if you run itEPSS 0.25%Jun 19, 2024
- Unknownunimo udr-ja1004_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.70%Jun 19, 2024
- High8.7nsfocusglobal secgate3600_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 8.08%Jun 18, 2024
- Unknownethyca fides Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 1.10%Jun 13, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 99.48%May 31, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS based applications ca…Check if you run itEPSS 0.20%May 30, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hci_req_sync_complete() In 'hci_req_sync_complete()', always free the…Check if you run itEPSS 0.28%May 20, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp->cp_conn would produce null…Check if you run itEPSS 0.22%May 19, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtime_id…Check if you run itEPSS 0.19%May 17, 2024
- High7.2A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions,…Check if you run itEPSS 0.66%May 14, 2024
- UnknownCisco AppDynamics Controller Directory Traversal VulnerabilityPatch nowKEVEPSS 2.15%May 10, 2024
- UnknownApache dubbo Deserialization of Untrusted DataPatch nowKEVEPSS 36.51%May 10, 2024
- UnknownLantronix premierwave_2050_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.06%May 7, 2024
- UnknownMStore API plugin for WordPress Add Listing REST API Authentication BypassPatch nowKEVEPSS 67.28%May 6, 2024
- Unknownpython python URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.53%May 6, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a theoretical w…Check if you run itEPSS 0.18%May 1, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following warning consistently…Check if you run itEPSS 0.25%May 1, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with strict in order execution, we co…Check if you run itEPSS 0.27%May 1, 2024
- UnknownCode Unit4 Financials Cross Site Scripting VulnerabilityPatch nowKEVEPSS 1.79%Apr 27, 2024
- UnknownChatGPT pictureproxy.php Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 40.64%Apr 27, 2024
- Medium5.0CrushFTP CrushFTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 9.41%Apr 26, 2024
- Medium6.5vanquish woocommerce_customers_manager Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.32%Apr 24, 2024
Sort