Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Envoy is a cloud-native high-performance edge/middle/service proxy.Check if you run itEPSS 1.65%Jul 13, 2023
- UnknownFortinet fortinac External Control of File Name or PathPatch nowKEVEPSS 99.79%Jul 5, 2023
- High7.8A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.67%Jun 28, 2023
- Unknowncommscope arris_tr3300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 5.07%Jun 22, 2023
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 28.83%Jun 20, 2023
- Critical9.8Zyxel Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 82.26%Jun 19, 2023
- Medium4.3A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4 all versions…Check if you run itEPSS 0.88%Jun 13, 2023
- UnknownGeoServer 2 wps:Execute Request wps:LiteralData Remote Code ExecutionPatch nowKEVEPSS 44.82%Jun 12, 2023
- Critical9.8Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 85.69%Jun 12, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.57%Jun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.55%Jun 1, 2023
- Unknownemby emby.releases Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 1.70%May 25, 2023
- UnknownMStore API plugin for WordPress Authentication Bypass VulnerabilityPatch nowKEVEPSS 3.81%May 25, 2023
- High7.8Linux Kernel Use After FreePatch nowKEVEPSS 13.44%May 8, 2023
- High8.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13,…Check if you run itEPSS 0.89%May 3, 2023
- Unknownrazer sila_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.06%Apr 27, 2023
- Medium4.3Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notificat…Check if you run itEPSS 0.46%Apr 25, 2023
- Medium6.5Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the de…Check if you run itEPSS 0.69%Apr 25, 2023
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.Check if you run itEPSS 1.40%Apr 25, 2023
- High7.5Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports…Check if you run itEPSS 0.88%Apr 25, 2023
- High8.8Arbitrary command injection in embano1/wipCheck if you run itEPSS 3.73%Apr 24, 2023
- High7.5PaperCut NG/MF Improper Authentication VulnerabilityPatch nowKEVEPSS 78.05%Apr 20, 2023
- High7.2Cisco Small Business RV Series Routers Command Injection VulnerabilityPatch nowKEVEPSS 54.11%Apr 13, 2023
- High8.8MinIO Security Feature Bypass VulnerabilityPatch nowKEVEPSS 7.92%Mar 22, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
Sort