Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownYITH WooCommerce Ajax Product Filter Plugin Cross Site Scripting (XSS)Patch nowKEVEPSS 0.30%Jul 10, 2024
- Medium6.5A flaw was found in the 389 Directory Server.Check if you run itEPSS 0.92%Jul 9, 2024
- High7.8Microsoft Windows Improper Access ControlPatch nowKEVEPSS 4.52%Jul 9, 2024
- High7.5CVE-2024-32987 is listed by Microsoft SharePoint Server Information Disclosure Vulnerability.Check if you run itEPSS 2.34%Jul 9, 2024
- Medium5.5A vulnerability was found in OpenJPEG similar to CVE-2019-6988.Check if you run itEPSS 0.24%Jul 9, 2024
- Critical9.0RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challen…Check this weekEPSS 14.86%Jul 9, 2024
- High7.2Microsoft SharePoint Deserialization VulnerabilityPatch nowKEVEPSS 50.89%Jul 9, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() In function bond_option_arp_ip_targets_set()Check if you run itEPSS 0.25%Jul 9, 2024
- High8.6A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system pr…Check if you run itEPSS 1.05%Jul 9, 2024
- Unknownpdoc API Documentation for Python Projects 'pdoc --math' VulnerabilityPatch nowKEVEPSS 3.83%Jul 9, 2024
- High7.5Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 84.23%Jul 9, 2024
- High7.8Microsoft Windows Hyper-V Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.06%Jul 9, 2024
- UnknownUser Activity Log Pro Plugin Broken Access ControlPatch nowKEVEPSS 0.35%Jul 9, 2024
- UnknownWP User Switch Plugin Privilege EscalationPatch nowKEVEPSS 0.37%Jul 9, 2024
- Medium5.3A vulnerability was found in Undertow.Check if you run itEPSS 1.87%Jul 8, 2024
- High7.0A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).Patch nowKEVEPSS 27.93%Jul 8, 2024
- Medium5.3CVE-2024-39896 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.51%Jul 8, 2024
- Medium6.5CVE-2024-39895 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.80%Jul 8, 2024
- High7.7CVE-2024-39701 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.42%Jul 8, 2024
- Medium5.0CVE-2024-39699 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.43%Jul 8, 2024
- High7.2Realtek rtl819x_jungle_software_development_kit Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.19%Jul 8, 2024
- High7.2A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11.Check if you run itEPSS 1.28%Jul 8, 2024
- Critical9.8OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used…Check if you run itEPSS 8.92%Jul 8, 2024
- High7.5The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privi…Check if you run itEPSS 9.76%Jul 8, 2024
- UnknownWBW Product Table plugin for WordPress saveCustomTitle VulnerabilityPatch nowKEVEPSS 1.21%Jul 8, 2024
Sort