Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_memory_rox()…Check if you run itEPSS 0.30%Jul 29, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descript…Check if you run itEPSS 0.45%Jul 29, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stress test wi…Check if you run itEPSS 0.36%Jul 29, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-index…Check if you run itEPSS 0.25%Jul 29, 2024
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 0.67%Jul 29, 2024
- Medium6.5An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level.Check if you run itEPSS 0.45%Jul 26, 2024
- High7.5CVE-2024-41800 is listed by Craft is a content management system (CMS)..Check if you run itEPSS 0.46%Jul 25, 2024
- Unknownkeepass keepass Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 4.40%Jul 25, 2024
- UnknownOracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications OXI Component VulnerabilityPatch nowKEVEPSS 44.96%Jul 25, 2024
- UnknownTP-Link tl-wr840n_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 36.47%Jul 25, 2024
- Unknownmomentjs moment Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.84%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.62%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.66%Jul 25, 2024
- Unknownphp_everywhere_project php_everywhere Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.06%Jul 25, 2024
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 16.52%Jul 25, 2024
- UnknownTerramaster index.php app/del VulnerabilityPatch nowKEVEPSS 16.09%Jul 25, 2024
- UnknownSamba Samba Out-of-bounds ReadPatch nowKEVEPSS 73.59%Jul 25, 2024
- UnknownTalend ESB Runtime Unauthenticated Jolokia HTTP Endpoint VulnerabilityPatch nowKEVEPSS 1.25%Jul 25, 2024
- Unknownipeak ipeakcms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.57%Jul 25, 2024
- UnknownMicrosoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 36.24%Jul 25, 2024
- Unknowntableau tableau_server Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 14.31%Jul 25, 2024
- UnknownVMware vrealize_operations_for_horizon Incorrect AuthorizationPatch nowKEVEPSS 0.50%Jul 25, 2024
- Unknownfullworksplugins stop_user_enumeration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.39%Jul 25, 2024
- UnknownSiemens simatic_s7_cpu_1200_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 20.86%Jul 25, 2024
- Unknownwpwebinfotech social_auto_poster Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.82%Jul 24, 2024
Sort