Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownwebnus modern_events_calendar Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.12%Jul 8, 2024
- High8.6phonenumber: panic on parsing crafted phonenumber inputsCheck if you run itEPSS 0.71%Jul 7, 2024
- High7.5CVE-2024-39321 is listed by Traefik is an HTTP reverse proxy and load balancer..Check if you run itEPSS 0.59%Jul 5, 2024
- Medium6.8A flaw was found in the virtio-net device in QEMU.Check if you run itEPSS 0.66%Jul 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either alloca…Check if you run itEPSS 0.24%Jul 5, 2024
- Unknownwpwebelite woocommerce_social_login Deserialization of Untrusted DataPatch nowKEVEPSS 0.31%Jul 5, 2024
- Critical9.9Gogs Gogs Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 7.74%Jul 4, 2024
- UnknownWordPress JetThemeCore Plugin Arbitrary File DeletionPatch nowKEVEPSS 0.68%Jul 4, 2024
- Unknownradiustheme the_post_grid Missing AuthorizationPatch nowKEVEPSS 0.34%Jul 4, 2024
- Unknownchurch_admin_project church_admin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.54%Jul 4, 2024
- High7.5Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat.Check if you run itEPSS 4.60%Jul 3, 2024
- UnknownF-Logic DataCube3 req_id SQL InjectionPatch nowKEVEPSS 19.27%Jul 3, 2024
- UnknownArtifex Ghostscript SAFER Sandbox BypassPatch nowKEVEPSS 27.97%Jul 3, 2024
- High7.8A flaw was found in the QEMU disk image utility (qemu-img) 'info' command.Check if you run itEPSS 0.34%Jul 2, 2024
- Medium5.3Twilio Authy Information Disclosure VulnerabilityPatch nowKEVEPSS 1.67%Jul 2, 2024
- Critical9.3trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager.Check this weekEPSS 14.85%Jul 1, 2024
- High7.5SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to…Check this weekEPSS 69.47%Jul 1, 2024
- High8.8In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then use to seri…Check if you run itEPSS 1.41%Jul 1, 2024
- High7.5An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series and NFX Series a…Check if you run itEPSS 0.50%Jul 1, 2024
- High7.5FlowiseAI Flowise Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 1.78%Jul 1, 2024
- Medium6.5A command for refining a collection shard key is missing an authorization check.Check if you run itEPSS 0.38%Jul 1, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 1, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Patch nowKEVEPSS 99.51%Jul 1, 2024
- Unknownpixelite events_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.31%Jul 1, 2024
Sort