Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Google Chromium V8 Out-of-Bounds Memory Access VulnerabilityPatch nowKEVEPSS 3.80%Jan 11, 2024
- UnknownAI Engine: ChatGPT Chatbot Plugin File Upload VulnerabilityPatch nowKEVEPSS 63.08%Jan 11, 2024
- Medium6.1wwbn avideo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.27%Jan 10, 2024
- High7.8Apple iOS and iPadOS Use-After-Free VulnerabilityPatch nowKEVEPSS 1.96%Jan 10, 2024
- Medium6.5A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.Check if you run itEPSS 0.57%Jan 10, 2024
- Critical9.1Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jan 10, 2024
- UnknownWPExperts post_smtp Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 90.34%Jan 10, 2024
- Unknownsygnoos popup_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.00%Jan 10, 2024
- High8.2Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Jan 10, 2024
- High8.8CVE-2024-21318 is listed by Microsoft SharePoint Server Remote Code Execution Vulnerability.Check this weekEPSS 30.80%Jan 9, 2024
- Medium5.5A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual g…Check if you run itEPSS 0.24%Jan 9, 2024
- High8.7Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass VulnerabilityCheck if you run itEPSS 1.18%Jan 9, 2024
- Medium6.5Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CP…Check if you run itEPSS 2.32%Jan 9, 2024
- High8.1Certain sequence of payloads may lead to remote code executionCheck if you run itEPSS 2.56%Jan 9, 2024
- High7.5Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT,…Check if you run itEPSS 0.33%Jan 9, 2024
- High7.0Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 0.49%Jan 9, 2024
- Medium6.5Topaz Antifraud wsftprm.sys Kernel Driver Process TerminationPatch nowKEVEPSS 0.33%Jan 8, 2024
- High7.0io_uring UAF, Unix SCM garbage collectionCheck if you run itEPSS 1.43%Jan 8, 2024
- High7.8It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.Check if you run itEPSS 5.87%Jan 8, 2024
- Critical9.8XWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 93.48%Jan 8, 2024
- High7.8Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 10.20%Jan 8, 2024
- Critical9.8TOTOLINK n200re_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.83%Jan 8, 2024
- Critical9.8TOTOLINK lr1200gb_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.91%Jan 8, 2024
- High7.2** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This issue affects ApCheck if you run itEPSS 1.21%Jan 6, 2024
- UnknownZKTeco zmm200_firmware Direct Request ('Forced Browsing')Patch nowKEVEPSS 5.16%Jan 6, 2024
Sort