Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.Check if you run itEPSS 0.33%Feb 24, 2025
- High8.6Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).Check if you run itEPSS 0.45%Feb 24, 2025
- Medium6.9navidrome navidrome Improper AuthenticationPatch nowKEVEPSS 0.98%Feb 24, 2025
- Medium6.1The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate…Check if you run itEPSS 0.79%Feb 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter tha…Check if you run itEPSS 0.37%Feb 22, 2025
- Medium4.9External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacke…Check if you run itEPSS 1.62%Feb 21, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.97%Feb 20, 2025
- Medium6.4A flaw was found in grub2.Check if you run itEPSS 0.33%Feb 19, 2025
- Medium4.4A flaw was found in grub2.Check if you run itEPSS 0.32%Feb 19, 2025
- Medium6.7A flaw was found in grub2.Check if you run itEPSS 0.29%Feb 19, 2025
- Medium4.3CVE-2025-27089 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.24%Feb 19, 2025
- UnknownDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003Check if you run itEPSS 0.60%Feb 19, 2025
- UnknownDrupal core - Moderately critical - Access bypass - SA-CORE-2025-002Check if you run itEPSS 0.32%Feb 19, 2025
- UnknownDrupal core - Critical - Cross site scripting - SA-CORE-2025-001Check if you run itEPSS 0.31%Feb 19, 2025
- UnknownCVE-2024-49860, CVE-2024-50055Check if you run itEPSS 0.25%Feb 19, 2025
- UnknownCVE-2024-49860, CVE-2024-50055Check if you run itEPSS 0.25%Feb 19, 2025
- Critical9.8Microsoft Power Pages Improper Access Control VulnerabilityPatch nowKEVEPSS 1.62%Feb 19, 2025
- Medium6.4A flaw was found in command/gpg.Check if you run itEPSS 0.28%Feb 18, 2025
- Medium4.4A flaw was found in grub2.Check if you run itEPSS 0.28%Feb 18, 2025
- Medium6.7A flaw was found in grub2.Check if you run itEPSS 0.30%Feb 18, 2025
- Medium6.7When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer.Check if you run itEPSS 0.30%Feb 18, 2025
- Medium5.2A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list.Check if you run itEPSS 0.29%Feb 18, 2025
- Medium6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled.Check if you run itEPSS 7.72%Feb 18, 2025
- Medium6.7A flaw was found in grub2.Check if you run itEPSS 0.31%Feb 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog() notifies p…Check if you run itEPSS 0.30%Feb 18, 2025
Sort