Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5CVE-2024-34350 is listed by Next.js is a React framework that can provide building blocks to create web applications..Check if you run itEPSS 1.19%May 14, 2024
- Medium6.1CVE-2024-34074 is listed by Frappe is a full-stack web application framework..Check if you run itEPSS 0.57%May 14, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the b…Check if you run itEPSS 0.26%May 14, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since call_rcu, which is called in the hlist_for_each_e…Check if you run itEPSS 0.24%May 14, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix Use-After-Free in ovs_ct_exit Since kfree_rcu, which is called in the hlist_f…Check if you run itEPSS 0.24%May 14, 2024
- High7.8Microsoft DWM Core Library Privilege Escalation VulnerabilityPatch nowKEVEPSS 6.17%May 14, 2024
- High8.8Microsoft Windows MSHTML Platform Security Feature Bypass VulnerabilityPatch nowKEVEPSS 3.94%May 14, 2024
- UnknownIvanti neurons_for_itsm Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.00%May 14, 2024
- UnknownIvanti Sentry Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.84%May 14, 2024
- Medium5.5The issue was addressed with improved checks.Patch nowKEVEPSS 1.50%May 13, 2024
- Critical9.6Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 15.24%May 13, 2024
- UnknownWPDeveloper essential_blocks Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 50.67%May 13, 2024
- Unknownthimpress learnpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 36.93%May 10, 2024
- UnknownCisco AppDynamics Controller Directory Traversal VulnerabilityPatch nowKEVEPSS 2.15%May 10, 2024
- UnknownApache kafka_connect Deserialization of Untrusted DataPatch nowKEVEPSS 95.81%May 10, 2024
- UnknownApache Spark Missing Authentication for Critical FunctionPatch nowKEVEPSS 30.20%May 10, 2024
- Unknownxuxueli xxl-job Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.43%May 10, 2024
- UnknownApache dubbo Deserialization of Untrusted DataPatch nowKEVEPSS 36.51%May 10, 2024
- UnknownArtifex Ghostscript Restoration of Privilege VulnerabilityPatch nowKEVEPSS 92.50%May 10, 2024
- UnknownphpMyAdmin phpMyAdmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 80.94%May 10, 2024
- UnknownChef Manage Add-on before 1.12.0 for Chef Crafted Serialized Data VulnerabilityPatch nowKEVEPSS 4.19%May 10, 2024
- High8.8Google Chromium V8 Out-of-Bounds Memory Write VulnerabilityPatch nowKEVEPSS 11.01%May 9, 2024
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.33%May 9, 2024
- UnknownArcserve Unified Data Protection 9.2 and 8.1 ASNative.dll Denial of ServicePatch nowKEVEPSS 41.84%May 9, 2024
- UnknownArcserve Unified Data Protection Directory TraversalPatch nowKEVEPSS 1.03%May 9, 2024
Sort