Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.2A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list.Check if you run itEPSS 0.29%Feb 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog() notifies p…Check if you run itEPSS 0.30%Feb 18, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In case we reach scheduler's limit,Check if you run itEPSS 0.28%Feb 18, 2025
- Low2.3There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can cre…Check if you run itEPSS 0.60%Feb 14, 2025
- UnknownOracle WebLogic Server Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.82%Feb 13, 2025
- UnknownPostgreSQL Quoting APIs SQL Injection VulnerabilityPatch nowKEVEPSS 90.03%Feb 13, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlock…Check if you run itEPSS 0.24%Feb 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CP…Check if you run itEPSS 0.26%Feb 12, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- UnknownTOTOLINK a3300r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Feb 12, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.57%Feb 11, 2025
- High7.1Microsoft Windows Storage Link Following VulnerabilityPatch nowKEVEPSS 2.28%Feb 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan found that ets_class_from_arg() can index an Out-…Check if you run itEPSS 0.62%Feb 10, 2025
- Medium5.3A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.Check if you run itEPSS 1.29%Feb 10, 2025
- Medium5.4A flaw was found in npm-serialize-javascript.Check if you run itEPSS 1.12%Feb 10, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- Medium6.1Apple iOS and iPadOS Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.42%Feb 10, 2025
- UnknownFour-Faith F3x36 Router bapply.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 0.67%Feb 9, 2025
- High8.6Trimble Cityworks Deserialization VulnerabilityPatch nowKEVEPSS 31.09%Feb 6, 2025
- Low3.4When asked to use a file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain c…Check if you run itEPSS 0.75%Feb 5, 2025
- UnknownNetis Router skk_get.cgi Information Disclosure VulnerabilityPatch nowKEVEPSS 6.29%Feb 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in…Check if you run itEPSS 0.24%Jan 31, 2025
- Medium6.6A vulnerability was found in CRI-O.Check if you run itEPSS 0.24%Jan 28, 2025
Sort