Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHeap-buffer-overflow in megasas_map_sglOpen the advisoryJul 14, 2022
- UnknownLinux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*.Check if you run itEPSS 0.41%Jul 12, 2022
- High7.8Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.77%Jul 12, 2022
- Critical9.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.Check if you run itEPSS 1.00%Jul 11, 2022
- Critical9.8CVE-2020-35168 is listed by Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Ti…Check if you run itEPSS 0.51%Jul 11, 2022
- Critical9.8CVE-2020-35167 is listed by Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Ti…Check if you run itEPSS 1.02%Jul 11, 2022
- Critical9.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.Check if you run itEPSS 0.72%Jul 11, 2022
- High8.1CVE-2020-35164 is listed by Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Ti…Check if you run itEPSS 0.78%Jul 11, 2022
- Critical9.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insufficiently Random Values Vulnerability.Check if you run itEPSS 1.07%Jul 11, 2022
- Critical9.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.Check if you run itEPSS 1.17%Jul 11, 2022
- Critical9.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper Input Validation Vulnerability.Check if you run itEPSS 1.10%Jul 11, 2022
- Critical9.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.Check if you run itEPSS 1.15%Jul 11, 2022
- Critical9.8varktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.01%Jul 11, 2022
- Medium5.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.Check if you run itEPSS 8.37%Jul 7, 2022
- Medium6.5curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms.Check this weekEPSS 36.35%Jul 7, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.Check this weekEPSS 31.50%Jul 7, 2022
- Medium5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.Check if you run itEPSS 4.90%Jul 5, 2022
- UnknownHeap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptorOpen the advisoryJul 5, 2022
- High7.8An issue was discovered in the Linux kernel through 5.18.9.Patch nowKEVEPSS 5.45%Jul 4, 2022
- High8.8WebRTC Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 70.83%Jul 1, 2022
- Unknownarmemberplugin armember Missing AuthorizationPatch nowKEVEPSS 8.67%Jun 6, 2022
- Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.Check if you run itEPSS 1.36%Jun 2, 2022
- High7.5libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server…Check if you run itEPSS 2.90%Jun 2, 2022
- Medium5.3libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies.Check if you run itEPSS 2.79%Jun 2, 2022
- High7.5Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.Check if you run itEPSS 1.13%Jun 1, 2022
Sort