Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacke…Check if you run itEPSS 0.36%Feb 11, 2025
- Medium4.4A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin priv…Check if you run itEPSS 0.32%Feb 11, 2025
- Medium6.1Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote unauthenticated attacker to obtain admin privileges.Check if you run itEPSS 0.74%Feb 11, 2025
- High7.4Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expCheck if you run itEPSS 1.86%Feb 11, 2025
- Medium4.9External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacke…Check if you run itEPSS 1.13%Feb 11, 2025
- High7.2Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin priv…Check if you run itEPSS 2.82%Feb 11, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.13%Feb 11, 2025
- High7.1Microsoft Windows Storage Link Following VulnerabilityPatch nowKEVEPSS 2.28%Feb 11, 2025
- Unknowniptanus wordpress_file_upload Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 93.34%Feb 11, 2025
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 33.16%Feb 11, 2025
- UnknownCVE-2024-12105 is named in a Cloudflare managed-rules release.Check this weekEPSS 41.68%Feb 11, 2025
- UnknownDell emc_avamar Missing AuthorizationPatch nowKEVEPSS 50.87%Feb 11, 2025
- Medium5.3Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.Check if you run itEPSS 0.58%Feb 10, 2025
- High8.6Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa…Check if you run itEPSS 0.59%Feb 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan found that ets_class_from_arg() can index an Out-…Check if you run itEPSS 0.62%Feb 10, 2025
- Medium5.3A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.Check if you run itEPSS 1.29%Feb 10, 2025
- Medium5.3A flaw in libtasn1 causes inefficient handling of specific certificate data.Check if you run itEPSS 1.11%Feb 10, 2025
- Medium5.4A flaw was found in npm-serialize-javascript.Check if you run itEPSS 1.12%Feb 10, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- Medium6.1Apple iOS and iPadOS Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.46%Feb 10, 2025
- UnknownFour-Faith F3x36 Router bapply.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.67%Feb 9, 2025
- High8.6Trimble Cityworks Deserialization VulnerabilityPatch nowKEVEPSS 31.31%Feb 6, 2025
- UnknownCVE-2024-50230 is listed by ALAS-2025-1957 (important): kernel.Check if you run itEPSS 0.28%Feb 5, 2025
- UnknownCVE-2024-50067 is listed by ALAS-2025-1957 (important): kernel.Check if you run itEPSS 0.24%Feb 5, 2025
Sort