Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.56%Feb 2, 2024
- Critical9.8An improper authentication vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.47%Feb 2, 2024
- High7.2CVE-2023-39302 is listed by An OS command injection vulnerability has been reported to affect several QNAP operating system versions..Check if you run itEPSS 1.07%Feb 2, 2024
- High8.8CVE-2023-39297 is listed by An OS command injection vulnerability has been reported to affect several QNAP operating system versions..Check if you run itEPSS 1.41%Feb 2, 2024
- Medium6.5An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.33%Feb 2, 2024
- UnknownGoogle Chrome Out-of-bounds ReadPatch nowKEVEPSS 13.36%Feb 2, 2024
- Medium6.1eyoucms eyoucms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.02%Feb 1, 2024
- High8.8Ivanti Connect Secure Privilege EscalationPatch nowKEVEPSS 85.42%Jan 31, 2024
- Medium5.9A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant.Check if you run itEPSS 1.16%Jan 31, 2024
- High7.8Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 28.06%Jan 31, 2024
- Medium5.9A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts.Check if you run itEPSS 0.88%Jan 31, 2024
- UnknownIvanti avalanche Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.58%Jan 31, 2024
- Medium6.5A flaw was found in the Linux kernel's memory deduplication mechanism.Check if you run itEPSS 0.62%Jan 30, 2024
- High7.5An issue was discovered in the Feed Me plugin 4.6.1 for Craft CMS.Check if you run itEPSS 1.07%Jan 30, 2024
- Medium5.4Cross Site Scripting (XSS) vulnerability in Craft CMS Audit Plugin before version 3.0.2 allows attackers to execute arbitrary code during user creation.Check if you run itEPSS 0.38%Jan 30, 2024
- Unknownhitron lguvr-16h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron lguvr-8h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron lguvr-4h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-16781_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-8781_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-4781_firmware Improper Input ValidationPatch nowKEVEPSS 0.56%Jan 30, 2024
- Unknownperforce helix_core Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.11%Jan 30, 2024
- UnknownGoogle Android Use After FreePatch nowKEVEPSS 1.72%Jan 30, 2024
- UnknownWindows MSHTML Platform Security Feature BypassPatch nowKEVEPSS 2.84%Jan 30, 2024
- Unknowncookieinformation wp-gdpr-compliance Missing AuthorizationPatch nowKEVEPSS 1.46%Jan 29, 2024
Sort