Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOodo Content-Type Cross-Site ScriptingPatch nowKEVDec 14, 2023
- UnknownOracle E-Business Suite Application Mgmt Pack for E-Business Suite VulnerabilityPatch nowKEVEPSS 3.81%Dec 14, 2023
- High7.5A flaw was found in xorg-server.Check if you run itEPSS 1.62%Dec 13, 2023
- High7.8A flaw was found in xorg-server.Check if you run itEPSS 1.57%Dec 13, 2023
- UnknownF5 big-ip_access_policy_manager Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 76.87%Dec 13, 2023
- UnknownMASTER IPCAMERA01 3.3.4.2103 Remote Command ExecutionPatch nowKEVEPSS 55.72%Dec 13, 2023
- Medium5.4A flaw was found in the mod_proxy_cluster in the Apache server.Check if you run itEPSS 2.24%Dec 12, 2023
- High7.8A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data.Check if you run itEPSS 0.57%Dec 12, 2023
- High7.5A flaw was found in Undertow.Check if you run itEPSS 1.03%Dec 12, 2023
- Medium6.5NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().Check if you run itEPSS 1.04%Dec 12, 2023
- UnknownGitLab GitLab Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 27.81%Dec 12, 2023
- UnknownOracle glassfish_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 99.48%Dec 12, 2023
- Medium5.5A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the…Check if you run itEPSS 0.31%Dec 11, 2023
- Unknownnetsweeper netsweeper Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.97%Dec 11, 2023
- Unknownwavlink wn575a4_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 68.58%Dec 11, 2023
- Unknownthemeisle visualizer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 38.99%Dec 11, 2023
- Medium6.5The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an…Check if you run itEPSS 0.66%Dec 10, 2023
- Medium4.4A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, an…Check if you run itEPSS 2.56%Dec 10, 2023
- High8.8A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.Check if you run itEPSS 4.32%Dec 10, 2023
- Medium4.3A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with…Check if you run itEPSS 2.77%Dec 10, 2023
- UnknownQuantumCloud simple_link_directory Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 10.82%Dec 10, 2023
- Critical9.1A flaw was found in Quarkus.Check if you run itEPSS 0.81%Dec 9, 2023
- Medium5.5A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel.Check if you run itEPSS 0.32%Dec 8, 2023
- High7.1An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel.Check if you run itEPSS 0.43%Dec 8, 2023
- High7.1An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.Check if you run itEPSS 0.53%Dec 8, 2023
Sort