Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8GeoVision Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 10.07%Jun 16, 2024
- Critical9.1Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values.Check if you run itEPSS 0.77%Jun 16, 2024
- High7.8IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement.Check if you run itEPSS 0.15%Jun 15, 2024
- Medium6.4sygnoos popup_builder Missing AuthorizationPatch nowKEVEPSS 0.27%Jun 15, 2024
- Critical9.8Certain models of ASUS routers have an arbitrary firmware upload vulnerability.Check if you run itEPSS 1.02%Jun 14, 2024
- Medium5.5Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.Check if you run itEPSS 0.32%Jun 14, 2024
- Medium4.9A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type.Check if you run itEPSS 0.62%Jun 13, 2024
- High8.8Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary…Check if you run itEPSS 1.27%Jun 13, 2024
- High7.2Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could res…Check if you run itEPSS 1.39%Jun 13, 2024
- High7.2Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code…Check if you run itEPSS 1.39%Jun 13, 2024
- High7.2Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code…Check if you run itEPSS 1.44%Jun 13, 2024
- Critical9.8Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass.Check if you run itEPSS 1.13%Jun 13, 2024
- Medium5.3Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass.Check if you run itEPSS 0.85%Jun 13, 2024
- Medium4.8Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an ad…Check if you run itEPSS 0.67%Jun 13, 2024
- High8.2Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.79%Jun 13, 2024
- High8.1Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation.Check if you run itEPSS 0.91%Jun 13, 2024
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityPatch nowKEVEPSS 99.99%Jun 13, 2024
- Unknownethyca fides Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 1.10%Jun 13, 2024
- UnknownFortinet FortiOS and FortiProxy Backup File Weak Key VulnerabilityPatch nowKEVEPSS 3.47%Jun 13, 2024
- Medium5.2A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges.Check if you run itEPSS 0.13%Jun 12, 2024
- Medium6.5It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.html#security-…Check if you run itEPSS 0.46%Jun 12, 2024
- High7.13rd party token leak and authentication bypassCheck if you run itEPSS 0.70%Jun 12, 2024
- Medium5.3Denial-of-Service via Improper Exception HandlingCheck if you run itEPSS 0.74%Jun 12, 2024
- Low2.3Leaking data via relations via the Admin PanelCheck if you run itEPSS 0.39%Jun 12, 2024
- Medium6.7A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file.Check if you run itEPSS 0.34%Jun 12, 2024
Sort