Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownwebtoprint web_to_print_shop\ Files or Directories Accessible to External PartiesPatch nowKEVEPSS 7.88%Dec 25, 2023
- Unknownincomcms_project incomcms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 71.33%Dec 25, 2023
- Unknownmidasolutions eframework Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 98.24%Dec 25, 2023
- High7.8Spreadsheet::ParseExcel Remote Code Execution VulnerabilityPatch nowKEVEPSS 18.96%Dec 24, 2023
- High7.0OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_a…Check if you run itEPSS 0.66%Dec 24, 2023
- UnknownBarracuda ESG Appliance ParseExcel Code Execution VulnerabilityPatch nowKEVEPSS 44.57%Dec 24, 2023
- UnknownSolarWinds Serv-U Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.80%Dec 24, 2023
- UnknownHP edgeline_infrastructure_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 68.29%Dec 24, 2023
- Unknownhongdian h8922 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 27.91%Dec 24, 2023
- Unknowndgtl huemagic Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.33%Dec 24, 2023
- Unknownkaswara_project kaswara Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 42.14%Dec 24, 2023
- Unknownpatreon patreon_wordpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 6.75%Dec 24, 2023
- Unknownadvantech r-seenet Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 69.63%Dec 24, 2023
- Medium5.9A vulnerability was found in systemd-resolved.Check if you run itEPSS 0.84%Dec 23, 2023
- UnknownWordPress BuddyBoss Theme Authentication VulnerabilityPatch nowKEVEPSS 0.70%Dec 23, 2023
- Unknownwpdevart booking_calendar Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.81%Dec 23, 2023
- UnknownWordPress wordpress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 97.80%Dec 23, 2023
- Unknownkainelabs youzify Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.81%Dec 23, 2023
- UnknownKaseya vsa Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 60.35%Dec 23, 2023
- Medium5.5A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel.Check if you run itEPSS 0.28%Dec 21, 2023
- High7.0A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel.Check if you run itEPSS 0.73%Dec 21, 2023
- Medium6.5Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable.Check if you run itEPSS 1.39%Dec 21, 2023
- Medium6.5Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation.Check if you run itEPSS 1.03%Dec 21, 2023
- Medium4.3CVE-2023-48291 is listed by inventory_high.Check if you run itEPSS 1.80%Dec 21, 2023
- Medium5.4Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter…Check if you run itEPSS 1.34%Dec 21, 2023
Sort