Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 0.50%Oct 11, 2024
- Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityPatch nowKEVEPSS 99.63%Oct 9, 2024
- Critical9.9Palo Alto Networks Expedition OS Command Injection VulnerabilityPatch nowKEVEPSS 98.55%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityPatch nowKEVEPSS 59.65%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityPatch nowKEVEPSS 43.78%Oct 8, 2024
- High8.1Microsoft Windows MSHTML Platform Spoofing VulnerabilityPatch nowKEVEPSS 46.11%Oct 8, 2024
- High7.8Microsoft Windows Management Console Remote Code Execution VulnerabilityPatch nowKEVEPSS 66.70%Oct 8, 2024
- UnknownOracle WebLogic Server Core Component T3/IIOP Unauthenticated VulnerabilityPatch nowKEVEPSS 0.87%Oct 8, 2024
- UnknownpgAdmin 4 OAuth2 Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.69%Oct 7, 2024
- UnknownASUS Router Authentication Bypass VulnerabilityPatch nowKEVEPSS 43.46%Oct 4, 2024
- Medium4.7A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction.Check if you run itEPSS 0.29%Oct 1, 2024
- UnknownFlowiseAI Flowise Improper AuthenticationPatch nowKEVEPSS 45.05%Sep 29, 2024
- Critical9.3ScienceLogic SL1 Unspecified VulnerabilityPatch nowKEVEPSS 3.83%Sep 28, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info The MBX_TIMEOUT return code is not handled…Check if you run itEPSS 0.25%Sep 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ethtool: fail closed if we can't get max channel used in indirection tables Commit 0d1b7d6c9274 ("b…Check if you run itEPSS 0.25%Sep 27, 2024
- UnknownCups-browsed INADDR_ANY IPP Request VulnerabilityPatch nowKEVEPSS 50.60%Sep 27, 2024
- UnknownGradio save_url_to_cache Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 37.11%Sep 25, 2024
- Critical9.1Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityPatch nowKEVEPSS 98.61%Sep 19, 2024
- Unknownmaianscriptworld maian_cart Missing AuthorizationPatch nowKEVEPSS 66.43%Sep 19, 2024
- Unknowncraftcms Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 72.82%Sep 19, 2024
- Unknownicewarp mail_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.34%Sep 19, 2024
- UnknownJenkins github Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 90.89%Sep 19, 2024
- UnknownAndroid Nexus 5 Qualcomm Components Elevation of Privilege VulnerabilityPatch nowKEVEPSS 0.48%Sep 19, 2024
- Unknownmarketo_ma_project marketo_ma Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.95%Sep 19, 2024
Sort