Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Visual Studio Information Disclosure VulnerabilityPatch nowKEVEPSS 7.61%May 6, 2024
- UnknownMicrosoft Internet Explorer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 10.15%May 6, 2024
- UnknownOpenSSL OpenSSL Inadequate Encryption StrengthPatch nowKEVEPSS 95.33%May 6, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handl…Check if you run itEPSS 0.26%May 1, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CVE-2023-6270.Check if you run itEPSS 0.31%Apr 17, 2024
- Medium5.9Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit ce…Check this weekEPSS 52.42%Apr 8, 2024
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.49%Apr 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming th…Check if you run itEPSS 0.24%Apr 2, 2024
- UnknownQNAP QTS Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 1.56%Mar 24, 2024
- UnknownCrushFTP CrushFTP Improper Control of Dynamically-Managed Code ResourcesPatch nowKEVEPSS 81.80%Mar 21, 2024
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.86%Feb 12, 2024
- UnknownFontsy WordPress plugin through 1.8.6 SQL InjectionPatch nowKEVEPSS 4.76%Jan 22, 2024
- High7.8Spreadsheet::ParseExcel Remote Code Execution VulnerabilityPatch nowKEVEPSS 19.11%Dec 24, 2023
- UnknownWordPress BuddyBoss Theme Authentication VulnerabilityPatch nowKEVEPSS 0.70%Dec 23, 2023
- UnknownApache Airflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.88%Dec 8, 2023
- UnknownApple safari Improper Input ValidationPatch nowKEVEPSS 61.32%Dec 7, 2023
- UnknownSymantec Web Gateway 5.0.x before 5.0.3 management GUI Remote Code ExecutionPatch nowKEVEPSS 72.95%Dec 6, 2023
- High7.5wpfastestcache wp_fastest_cache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 73.71%Dec 4, 2023
- Unknownsimplefilelist simple-file-list Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 7.07%Dec 2, 2023
- Unknownusersultra users_ultra Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.33%Nov 30, 2023
- Unknowngenetechsolutions pie_register URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 24.26%Nov 27, 2023
- Unknown3cx 3cx Insufficiently Protected CredentialsPatch nowKEVEPSS 8.35%Nov 25, 2023
- Unknownmeritlilin p2r8852e2_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 2.08%Nov 25, 2023
- Unknownalibaba nacos Missing Authentication for Critical FunctionPatch nowKEVEPSS 65.72%Nov 19, 2023
- UnknownCisco evolved_programmable_network_manager Improper Input ValidationPatch nowKEVEPSS 98.05%Nov 15, 2023