Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownChartify WordPress Chart Plugin For WordPress Local File Inclusion VulnerabilityPatch nowKEVEPSS 4.81%Nov 14, 2024
- Medium5.1Citrix Session Recording Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 14.64%Nov 12, 2024
- Medium5.1Citrix Session Recording Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.48%Nov 12, 2024
- High8.8Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityPatch nowKEVEPSS 14.18%Nov 12, 2024
- Medium6.5Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 84.27%Nov 12, 2024
- Critical9.8gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.Check if you run itEPSS 1.51%Nov 11, 2024
- UnknownFour-Faith adjust_sys_time OS Command InjectionPatch nowKEVEPSS 84.12%Nov 9, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() The step variable is initi…Check if you run itEPSS 0.23%Nov 8, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEM_UNINIT's meaning Lonial reported an issue in the BPF verifier where che…Check if you run itEPSS 0.21%Nov 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix null-ptr-deref in target_alloc_device() There is a null-ptr-deref issue rep…Check if you run itEPSS 0.26%Nov 7, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2_IOCTL request When using encryption, either enforced by th…Check if you run itEPSS 0.28%Nov 7, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its parent…Check if you run itEPSS 0.24%Nov 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory-access in proto_unregister There's issue as follows: KASAN: maybe…Check if you run itEPSS 0.26%Nov 7, 2024
- UnknownEVGA Precision WinRing0.sys and WinRing0x64.sys Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.60%Nov 6, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() returns a string len…Check if you run itEPSS 0.25%Nov 5, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net In the normal case, when…Check if you run itEPSS 0.24%Nov 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acqui…Check if you run itEPSS 0.74%Nov 5, 2024
- Critical9.8A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 allows for SQL injection through prompt injection.Check this weekEPSS 13.74%Nov 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump)…Check if you run itEPSS 0.25%Nov 5, 2024
- UnknownSecurity exception in org.apache.lucene.util.ArrayUtil.growExactOpen the advisoryNov 1, 2024
- UnknownIvanti Connect Secure and Policy Secure Out-of-bounds WritePatch nowKEVEPSS 18.99%Oct 30, 2024
- Unknownpostgresql postgresql_jdbc_driver Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.81%Oct 30, 2024
- UnknownAI Power: Complete AI Pack plugin for WordPress handle_image_upload Function Arbitrary File Upload VulnerabilityPatch nowKEVEPSS 14.98%Oct 30, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs.Check if you run itEPSS 0.22%Oct 29, 2024
- Medium5.3Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')Check if you run itEPSS 0.27%Oct 28, 2024
Sort