Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Cisco ASA and FTD Denial of Service VulnerabilityPatch nowKEVEPSS 70.69%Apr 24, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected For those endpoint dev…Check if you run itEPSS 0.23%Apr 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling crypto_finalize_request, BH should be…Check if you run itEPSS 0.73%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/events/subscriptionsPatch nowKEVEPSS 2.37%Apr 17, 2024
- UnknownOpenMetadata Authentication BypassPatch nowKEVEPSS 73.26%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/policiesPatch nowKEVEPSS 12.53%Apr 17, 2024
- UnknownFortinet fortiwlm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 21.32%Apr 14, 2024
- Critical10.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 15.10%Apr 6, 2024
- UnknownNextChat Internal HTTP Endpoints SSRF and XSSPatch nowKEVEPSS 83.16%Apr 6, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the…Check if you run itEPSS 0.24%Apr 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIG_DMA_API_DEBUG_SG resul…Check if you run itEPSS 0.23%Apr 4, 2024
- Unknownruifang-tech rebuild Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 34.71%Apr 4, 2024
- Critical9.8D-Link Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 3, 2024
- Critical9.8D-Link Multiple NAS Devices Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 98.11%Apr 3, 2024
- UnknownAtlassian Jira Server and Data Center Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.06%Mar 30, 2024
- UnknownAutomatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request ForgeryPatch nowKEVEPSS 72.77%Mar 29, 2024
- Low3.5When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error…Check if you run itEPSS 1.68%Mar 27, 2024
- Unknownanyscale ray Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 83.94%Mar 26, 2024
- UnknownIBM operational_decision_manager Deserialization of Untrusted DataPatch nowKEVEPSS 73.40%Mar 22, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix RELEASE_LOCKOWNER The test on so_count in nfsd4_release_lockowner() is nonsense and harmful.Check if you run itEPSS 0.20%Mar 13, 2024
- UnknownGrafana Labs Grafana Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 99.86%Mar 7, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say…Check if you run itEPSS 0.85%Mar 4, 2024
- UnknownTOTOLINK a3002ru Improper AuthenticationPatch nowKEVEPSS 29.56%Feb 23, 2024
- High7.5A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2…Check if you run itEPSS 2.61%Feb 22, 2024
- High7.2An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClient…Check if you run itEPSS 0.82%Feb 15, 2024
Sort