Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of…Check if you run itEPSS 0.28%May 1, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/policies/validation/condition/Patch nowKEVEPSS 7.89%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/events/subscriptionsPatch nowKEVEPSS 2.37%Apr 17, 2024
- UnknownOpenMetadata Authentication BypassPatch nowKEVEPSS 73.26%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/events/subscriptions/validation/condition/Patch nowKEVEPSS 45.73%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in PUT /api/v1/policiesPatch nowKEVEPSS 12.53%Apr 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ext4 filesys…Check if you run itEPSS 0.24%Mar 26, 2024
- Unknownvisual-tools dvr_vx16_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 69.88%Mar 6, 2024
- UnknownTerraMaster TerraMaster OS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 31.88%Feb 22, 2024
- UnknownTenda ac15_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.43%Feb 22, 2024
- High7.8In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunksCheck if you run itEPSS 0.41%Jan 26, 2024
- Unknownseopress seopress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Jan 22, 2024
- UnknownLinksys re6500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 32.94%Jan 22, 2024
- Unknownlinknet-usa lw-n605r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.66%Jan 3, 2024
- Unknownhongdian h8922 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 27.91%Dec 24, 2023
- Medium6.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token…Check this weekEPSS 19.75%Dec 18, 2023
- Unknownnetsweeper netsweeper Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 94.97%Dec 11, 2023
- Unknownviessmann vitogate_300_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 15.25%Dec 4, 2023
- Unknownapsystems energy_communication_unit_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 84.75%Dec 4, 2023
- UnknownUserPro plugin for WordPress userpro shortcut VulnerabilityPatch nowKEVEPSS 0.84%Nov 21, 2023
- UnknownJira CachingResourceDownloadRewriteRule class Security BypassPatch nowKEVEPSS 59.83%Nov 17, 2023
- UnknownMetabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 Unauthenticated Command ExecutionPatch nowKEVEPSS 98.68%Nov 13, 2023
- UnknownRank Math seo Missing AuthorizationPatch nowKEVEPSS 9.11%Jul 19, 2023
- Unknowngocloud s2a_wl_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.85%Apr 18, 2023
- High8.8MinIO Security Feature Bypass VulnerabilityPatch nowKEVEPSS 7.92%Mar 22, 2023