Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In case we reach scheduler's limit,Check if you run itEPSS 0.28%Feb 18, 2025
- Critical9.3churchcrm churchcrm Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.46%Feb 18, 2025
- Medium6.1The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly r…Check if you run itEPSS 0.18%Feb 18, 2025
- Unknownusualtool usualtoolcms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.62%Feb 18, 2025
- High7.3Yeti Server Side Template Injection VulnerabilityPatch nowKEVEPSS 3.92%Feb 18, 2025
- Low2.3There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid fCheck if you run itEPSS 0.71%Feb 14, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module.Check if you run itEPSS 0.30%Feb 14, 2025
- Medium5.1An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests…Check if you run itEPSS 0.24%Feb 14, 2025
- High8.3A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope.Check if you run itEPSS 0.82%Feb 13, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to…Check if you run itEPSS 0.23%Feb 13, 2025
- Low2.7Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business be…Check if you run itEPSS 0.48%Feb 13, 2025
- Medium6.5Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Busi…Check if you run itEPSS 0.40%Feb 13, 2025
- Medium6.5Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business befo…Check if you run itEPSS 0.57%Feb 13, 2025
- UnknownOracle WebLogic Server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.82%Feb 13, 2025
- UnknownPostgreSQL Quoting APIs SQL Injection VulnerabilityPatch nowKEVEPSS 90.03%Feb 13, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap() When mremap()ing a memory region previously registered…Check if you run itEPSS 0.26%Feb 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlock…Check if you run itEPSS 0.24%Feb 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CP…Check if you run itEPSS 0.26%Feb 12, 2025
- High7.1Palo Alto Networks PAN-OS File Read VulnerabilityPatch nowKEVEPSS 2.00%Feb 12, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- Critical9.8apusthemes superio Incorrect Privilege AssignmentPatch nowKEVEPSS 0.66%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK x6000r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.95%Feb 12, 2025
- Medium5.4An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2.Check if you run itEPSS 1.23%Feb 11, 2025
Sort