Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue […Check if you run itEPSS 0.38%Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha().Check if you run itEPSS 0.25%Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is missing, and s…Check if you run itEPSS 0.25%Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time.Check if you run itEPSS 0.30%Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that…Check if you run itEPSS 0.27%Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protectio…Check if you run itEPSS 0.26%Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Raw packet from PF_PACKET socket ontop o…Check if you run itEPSS 0.27%Jun 21, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to the PDI, presumably to skip theCheck if you run itEPSS 0.24%Jun 21, 2024
- UnknownInstaWP instawp_connect Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.53%Jun 21, 2024
- High8.6Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /strapi.io/_next/image.Check if you run itEPSS 0.56%Jun 20, 2024
- Medium5.5Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity.Check if you run itEPSS 0.56%Jun 20, 2024
- Medium6.5Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function.Check if you run itEPSS 0.64%Jun 20, 2024
- High7.5Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via sscanf function.Check if you run itEPSS 0.54%Jun 20, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda…Check if you run itEPSS 0.25%Jun 20, 2024
- Medium6.5bplugins html5_video_player Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.64%Jun 20, 2024
- High7.5reposilite reposilite Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.12%Jun 19, 2024
- High8.1Kafka UI is an Open-Source Web UI for Apache Kafka Management.Check this weekEPSS 51.05%Jun 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called withou…Check if you run itEPSS 0.24%Jun 19, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_I…Check if you run itEPSS 0.66%Jun 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5e_suspend cleans resources only if netif_device_present() r…Check if you run itEPSS 0.26%Jun 19, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the request…Check if you run itEPSS 0.24%Jun 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid1…Check if you run itEPSS 0.20%Jun 19, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been ide…Check if you run itEPSS 0.19%Jun 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netrom: fix possible dead-lock in nr_rt_ioctl() syzbot loves netrom, and found a possible deadlock…Check if you run itEPSS 0.19%Jun 19, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values.Check if you run itEPSS 0.79%Jun 19, 2024
Sort