Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8scsi: qla2xxx: Implement ref count for SRBCheck if you run itEPSS 0.33%Feb 26, 2025
- Critical9.8rxrpc: Fix call timer start racing with call destructionCheck if you run itEPSS 0.50%Feb 26, 2025
- High7.5netfilter: conntrack: revisit gc autotuningCheck if you run itEPSS 0.61%Feb 26, 2025
- Critical9.8net/tls: fix slab-out-of-bounds bug in decrypt_internalCheck if you run itEPSS 0.67%Feb 26, 2025
- High7.1net: ipv4: fix route with nexthop object delete warningCheck if you run itEPSS 0.28%Feb 26, 2025
- High7.8IB/rdmavt: add lock to call to rvt_error_qp to prevent a race conditionCheck if you run itEPSS 0.19%Feb 26, 2025
- High7.5ipv6: fix panic when forwarding a pkt with no in6 devCheck if you run itEPSS 0.69%Feb 26, 2025
- UnknownMicrosoft xbox_gaming_services Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.65%Feb 26, 2025
- UnknownMicrosoft Windows Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 1.38%Feb 26, 2025
- Unknownkrpano krpano Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 4.12%Feb 26, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Booknetic Booknetic booknetic allows Cross Site Request Forgery.This issue affects Booknetic: from n/a before 5.10.4.Check if you run itEPSS 0.16%Feb 25, 2025
- Medium6.5Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an or…Check if you run itEPSS 0.69%Feb 25, 2025
- High8.8Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.Check if you run itEPSS 0.69%Feb 25, 2025
- UnknownNextChat NextChat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.17%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.29%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 80.30%Feb 25, 2025
- Unknownbuffalo wsr-2533dhpl2-bk_firmware Improper AuthenticationPatch nowKEVEPSS 8.17%Feb 25, 2025
- UnknownVMware Spring Framework Unintended Proxy or Intermediary ('Confused Deputy')Patch nowKEVEPSS 10.21%Feb 25, 2025
- Critical9.8An SQL injection risk was identified in the module list filter within course search.Check if you run itEPSS 0.56%Feb 24, 2025
- Medium4.3Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.Check if you run itEPSS 0.27%Feb 24, 2025
- Medium5.3Insufficient capability checks made it possible to disable badges a user does not have permission to access.Check if you run itEPSS 0.30%Feb 24, 2025
- Medium6.1The question bank filter required additional sanitizing to prevent a reflected XSS risk.Check if you run itEPSS 0.36%Feb 24, 2025
- Medium6.1Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.Check if you run itEPSS 0.52%Feb 24, 2025
- Medium6.1The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.Check if you run itEPSS 0.29%Feb 24, 2025
- Medium5.3Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.Check if you run itEPSS 0.37%Feb 24, 2025
Sort