Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownchamilo chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 69.67%Sep 18, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as follows:…Check if you run itEPSS 0.23%Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either alloca…Check if you run itEPSS 0.24%Jul 5, 2024
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 34.52%Jun 26, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_I…Check if you run itEPSS 0.66%Jun 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pstore/zone: Add a null pointer check to the psz_kmsg_read kasprintf() returns a pointer to dynamic…Check if you run itEPSS 0.21%May 19, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer…Check if you run itEPSS 0.28%May 17, 2024
- UnknownCisco AppDynamics Controller Directory Traversal VulnerabilityPatch nowKEVEPSS 2.15%May 10, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Remove useless locks in usbtv_video_free() Remove locks calls in usbtv_video_free() b…Check if you run itEPSS 0.21%May 1, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can…Check if you run itEPSS 0.24%May 1, 2024
- UnknownLogin with Phone Number Plugin Missing Authorization VulnerabilityPatch nowKEVEPSS 0.36%Apr 22, 2024
- UnknownHamid Alinia - idehweb Login With Phone Number Privilege EscalationPatch nowKEVEPSS 0.46%Apr 15, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx signalin…Check if you run itEPSS 0.25%Apr 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the…Check if you run itEPSS 0.18%Apr 2, 2024
- UnknownCrushFTP CrushFTP Improper Control of Dynamically-Managed Code ResourcesPatch nowKEVEPSS 81.80%Mar 21, 2024
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)Check if you run itEPSS 3.35%Jan 2, 2024
- Medium5.9OpenBSD openssh Improper Validation of Integrity Check ValuePatch nowKEVEPSS 93.55%Dec 18, 2023
- Unknownchamilo chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 16.18%Dec 2, 2023
- Unknownalibaba nacos Authentication Bypass by SpoofingPatch nowKEVEPSS 83.48%Dec 1, 2023
- Unknownlucee lucee_server Missing AuthorizationPatch nowKEVEPSS 89.19%Nov 29, 2023
- Unknownkirona dynamic_resource_scheduling Direct Request ('Forced Browsing')Patch nowKEVEPSS 48.30%Nov 26, 2023
- Unknownwowza streaming_engine Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 22.29%Nov 26, 2023
- Unknownalibaba nacos Missing Authentication for Critical FunctionPatch nowKEVEPSS 65.72%Nov 19, 2023
- UnknownCisco RV Series Routers Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 77.48%Nov 15, 2023
- UnknownDynamicweb Logic Flaw Leading to Remote Code ExecutionPatch nowKEVEPSS 40.01%Nov 14, 2023