Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Cisco IOS XE Web UI Command Injection VulnerabilityPatch nowKEVEPSS 92.94%Oct 16, 2023
- Critical10.0Cisco IOS XE Web UI Privilege Escalation VulnerabilityPatch nowKEVEPSS 99.78%Oct 16, 2023
- High7.5An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.Check if you run itEPSS 0.64%Oct 15, 2023
- Medium6.4An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3.Check if you run itEPSS 0.29%Oct 14, 2023
- Medium4.3Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "ex…Check if you run itEPSS 1.60%Oct 14, 2023
- Medium6.5Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request th…Check if you run itEPSS 1.90%Oct 14, 2023
- Medium6.5Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user h…Check if you run itEPSS 1.44%Oct 14, 2023
- Medium6.5Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task ins…Check if you run itEPSS 2.01%Oct 14, 2023
- Critical9.8MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field.Check if you run itEPSS 3.45%Oct 14, 2023
- Unknownhrp2000 e-hr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.73%Oct 14, 2023
- UnknownWeaver e-cology Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.18%Oct 14, 2023
- High7.5CVE-2023-32974 is listed by A path traversal vulnerability has been reported to affect several QNAP operating system versions..Check if you run itEPSS 0.73%Oct 13, 2023
- High7.2CVE-2023-32973 is listed by A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions..Check if you run itEPSS 0.59%Oct 13, 2023
- Medium4.9CVE-2023-32970 is listed by A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions..Check if you run itEPSS 0.60%Oct 13, 2023
- Medium5.3Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Uncontrolled Resource Co…Check if you run itEPSS 0.76%Oct 13, 2023
- Medium6.6CVE-2023-38250 is listed by inventory_high.Check if you run itEPSS 0.83%Oct 13, 2023
- Medium6.6CVE-2023-38249 is listed by inventory_high.Check if you run itEPSS 0.83%Oct 13, 2023
- Medium6.6CVE-2023-38221 is listed by inventory_high.Check if you run itEPSS 0.83%Oct 13, 2023
- High7.5Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Authorization…Check if you run itEPSS 0.80%Oct 13, 2023
- High8.7Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a stored Cross-Site Script…Check if you run itEPSS 0.75%Oct 13, 2023
- High8.8Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Incorrect Authorization .Check if you run itEPSS 0.88%Oct 13, 2023
- Medium4.9Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Input Validati…Check if you run itEPSS 0.80%Oct 13, 2023
- Medium6.8Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forg…Check if you run itEPSS 0.86%Oct 13, 2023
- High7.7A flaw was found in the tracker-miners package.Check if you run itEPSS 0.85%Oct 13, 2023
- Medium6.5An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauth…Check if you run itEPSS 0.30%Oct 13, 2023
Sort