Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8CVE-2024-28103 is listed by Action Pack is a framework for handling and responding to web requests..Check if you run itEPSS 0.66%Jun 4, 2024
- Critical9.1Apache OFBiz Improper Restricted Pathname Limitation VulnerabilityPatch nowKEVEPSS 87.88%Jun 4, 2024
- Critical9.1StellarWP the_events_calendar Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.08%Jun 4, 2024
- Critical9.8Zyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.35%Jun 4, 2024
- High7.5CVE-2024-36128 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.62%Jun 3, 2024
- Unknownbackupbliss backup_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.05%Jun 3, 2024
- High7.5Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page.Check if you run itEPSS 0.42%May 31, 2024
- High8.8Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.Check if you run itEPSS 0.40%May 31, 2024
- High8.8The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.Check if you run itEPSS 0.36%May 31, 2024
- Medium4.3The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.Check if you run itEPSS 0.36%May 31, 2024
- Medium6.5In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity module…Check if you run itEPSS 0.48%May 31, 2024
- Medium6.5In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct…Check if you run itEPSS 0.46%May 31, 2024
- Medium5.9In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and dir…Check if you run itEPSS 0.36%May 31, 2024
- Medium6.5In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and dir…Check if you run itEPSS 0.48%May 31, 2024
- High8.4Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.Check if you run itEPSS 0.40%May 31, 2024
- Medium4.3ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.Check if you run itEPSS 0.50%May 31, 2024
- Critical9.8The referrer URL used by MFA required additional sanitizing, rather than being used directly.Check if you run itEPSS 0.55%May 31, 2024
- Medium5.4Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.Check if you run itEPSS 0.37%May 31, 2024
- Medium6.1Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation.Check if you run itEPSS 0.38%May 31, 2024
- Medium6.2Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permissio…Check if you run itEPSS 0.37%May 31, 2024
- High8.1A vulnerability was found in libndp.Check if you run itEPSS 1.17%May 31, 2024
- High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityPatch nowKEVEPSS 99.94%May 31, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 99.48%May 31, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate propname buffe…Check if you run itEPSS 0.25%May 30, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_…Check if you run itEPSS 0.25%May 30, 2024
Sort