Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program…Check if you run itEPSS 0.23%May 17, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading the sysctl…Check if you run itEPSS 0.19%May 17, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup The Linked…Check if you run itEPSS 0.19%May 17, 2024
- Medium5.3Issue summary: Checking excessively long DSA keys or parameters may be very slow.Check if you run itEPSS 1.13%May 16, 2024
- High7.5lfprojects mlflow Path Traversal: '\..\filename'Patch nowKEVEPSS 43.01%May 16, 2024
- UnknownTutor LMS Pro plugin for WordPress authenticate function VulnerabilityPatch nowKEVEPSS 1.01%May 16, 2024
- UnknownMura, Masa SQL Injection VulnerabilityPatch nowKEVEPSS 78.44%May 16, 2024
- UnknownQNAP QTS Command InjectionPatch nowKEVEPSS 13.52%May 16, 2024
- UnknownBonita Web RestAPIAuthorizationFilter Authentication Bypass VulnerabilityPatch nowKEVEPSS 56.72%May 15, 2024
- Unknowncamptocamp terraboard Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.76%May 15, 2024
- UnknownControl Web Panel (CWP), CentOS Web Panel Preauth Remote Code ExecutionPatch nowKEVEPSS 70.75%May 15, 2024
- High7.2CVE-2024-30044 is listed by Microsoft SharePoint Server Remote Code Execution Vulnerability.Check this weekEPSS 80.77%May 14, 2024
- High7.5CVE-2024-30043 is listed by Microsoft SharePoint Server Information Disclosure Vulnerability.Check this weekEPSS 56.41%May 14, 2024
- High7.2A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions,…Check if you run itEPSS 0.66%May 14, 2024
- Medium6.7A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions,…Check if you run itEPSS 0.28%May 14, 2024
- Medium5.3An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds cert…Check if you run itEPSS 0.46%May 14, 2024
- High7.5Improper validation of certain metadata input may result in the server not correctly serialising BSON.Check if you run itEPSS 0.55%May 14, 2024
- Medium5.4Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.Check if you run itEPSS 1.56%May 14, 2024
- High8.3A flaw was found in the github.com/containers/image library.Check if you run itEPSS 1.28%May 14, 2024
- Critical9.6XSS via customer contact form in FO, through file uploadCheck this weekEPSS 57.72%May 14, 2024
- Medium5.3Anonymous customer can download other customers's invoicesCheck if you run itEPSS 0.53%May 14, 2024
- Medium5.4CVE-2024-34709 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.45%May 14, 2024
- Medium4.9CVE-2024-34708 is listed by Directus is a real-time API and App dashboard for managing SQL database content..Check if you run itEPSS 0.76%May 14, 2024
- High7.5An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7.Check if you run itEPSS 1.80%May 14, 2024
- High7.5CVE-2024-34351 is listed by Next.js is a React framework that can provide building blocks to create web applications..Check if you run itEPSS 5.45%May 14, 2024
Sort