Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5gopiplus email_posts_to_subscribers Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.67%Nov 30, 2023
- High7.5ewww image_optimizer Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.02%Nov 30, 2023
- High7.2An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead t…Check if you run itEPSS 1.04%Nov 30, 2023
- High7.2An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PH…Check if you run itEPSS 1.04%Nov 30, 2023
- High8.8Apple Multiple Products WebKit Memory Corruption VulnerabilityPatch nowKEVEPSS 9.29%Nov 30, 2023
- Medium6.5Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 17.82%Nov 30, 2023
- Unknownhome-assistant home-assistant Improper AuthenticationPatch nowKEVEPSS 72.17%Nov 30, 2023
- Unknownspeakout\!_email_petitions_project speakout\!_email_petitions Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.79%Nov 30, 2023
- Unknownpresspage bestbooks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.13%Nov 30, 2023
- Unknownwp-video-gallery-free_project wp-video-gallery-free Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.13%Nov 30, 2023
- Unknownusersultra users_ultra Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.33%Nov 30, 2023
- UnknownQuantumCloud infographic_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 14.88%Nov 30, 2023
- Unknownwptaskforce wpcargo_track_\&_trace Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 56.15%Nov 30, 2023
- UnknownSAP scimono Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 10.12%Nov 30, 2023
- UnknownCitrix ShareFile Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 27.15%Nov 30, 2023
- Unknowndragonfly_project dragonfly Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 72.14%Nov 29, 2023
- Unknownbuddypress buddypress Incorrect AuthorizationPatch nowKEVEPSS 14.81%Nov 29, 2023
- Unknownlucee lucee_server Missing AuthorizationPatch nowKEVEPSS 89.19%Nov 29, 2023
- Unknowninfluxdata influxdb Improper AuthenticationPatch nowKEVEPSS 30.92%Nov 29, 2023
- High8.2HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon m…Check if you run itEPSS 1.51%Nov 28, 2023
- High7.5Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and fro…Check if you run itEPSS 2.65%Nov 28, 2023
- Medium5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.Check if you run itEPSS 1.27%Nov 28, 2023
- Medium6.5In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-s…Check if you run itEPSS 1.22%Nov 28, 2023
- High7.5In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.Check if you run itEPSS 1.16%Nov 28, 2023
- Critical9.8Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityPatch nowKEVEPSS 2.09%Nov 28, 2023
Sort