Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could resul…Check if you run itEPSS 2.21%Aug 16, 2022
- High8.8Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could resu…Check if you run itEPSS 2.36%Aug 16, 2022
- High8.8Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Dir…Check if you run itEPSS 2.33%Aug 16, 2022
- High7.2Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module.Check if you run itEPSS 5.16%Aug 16, 2022
- High7.5A flaw was found in Blender 3.3.0.Check if you run itEPSS 1.79%Aug 16, 2022
- High7.2In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.Check if you run itEPSS 1.03%Aug 16, 2022
- Medium5.3In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.Check if you run itEPSS 0.56%Aug 16, 2022
- High7.5In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.Check if you run itEPSS 0.95%Aug 16, 2022
- High8.8In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.Check this weekEPSS 15.99%Aug 16, 2022
- Medium6.1In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.Check if you run itEPSS 0.72%Aug 16, 2022
- High7.8Use After Free in GitHub repository vim/vim prior to 9.0.0213.Check if you run itEPSS 0.53%Aug 15, 2022
- High7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.Check if you run itEPSS 0.57%Aug 15, 2022
- UnknownMozilla Firefox Out-of-bounds WritePatch nowKEVEPSS 2.78%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 28.49%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.61%Aug 15, 2022
- UnknownMozilla Firefox Use After FreePatch nowKEVEPSS 0.95%Aug 15, 2022
- Unknownomron nx701-1600_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 1.29%Aug 13, 2022
- High7.5CVE-2022-35980 is listed by OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization..Check if you run itEPSS 1.23%Aug 12, 2022
- High7.2In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML source code of the "Maintenance > Push Configuration…Check if you run itEPSS 2.28%Aug 12, 2022
- Medium6.7Dm-verity is used for extending root-of-trust to root filesystems.Check if you run itEPSS 0.42%Aug 12, 2022
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityPatch nowKEVEPSS 92.07%Aug 10, 2022
- UnknownVMware vRealize Operations Authentication BypassPatch nowKEVEPSS 0.86%Aug 10, 2022
- High8.6Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityPatch nowKEVEPSS 2.69%Aug 10, 2022
- High7.8Windows Kernel Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.08%Aug 9, 2022
- High8.8Microsoft Office Remote Code Execution VulnerabilityCheck if you run itEPSS 1.99%Aug 9, 2022
Sort