Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6Google Chromium Visuals Use-After-Free VulnerabilityPatch nowKEVEPSS 8.35%May 7, 2024
- UnknownPHP PHP Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 21.79%May 6, 2024
- UnknownApple safari Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 5.83%May 6, 2024
- UnknownApple safari Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 6.49%May 6, 2024
- Unknownzivif pr115-204-p-rs_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 3.88%May 6, 2024
- UnknownAdobe Acrobat and Reader Improper Validation of Array IndexPatch nowKEVEPSS 6.72%May 6, 2024
- UnknownAdobe Acrobat and Reader Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 10.65%May 6, 2024
- UnknownApple safari Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 6.25%May 6, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command The isd200 sub-driver in usb-stor…Check if you run itEPSS 0.24%May 1, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of…Check if you run itEPSS 0.28%May 1, 2024
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 29.74%Apr 30, 2024
- UnknownZyxel nas326_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 41.35%Apr 28, 2024
- UnknownFlowmon Operating System Command Injection VulnerabilityPatch nowKEVEPSS 93.04%Apr 26, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAP_HASH overflow check on 32-bit arches The devmap code allocates a number hash bucket…Check if you run itEPSS 0.25%Apr 17, 2024
- Medium6.4In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2_context_set_notify [Syzbot reported] BUG: KASAN: slab-use-after-fre…Check if you run itEPSS 0.25%Apr 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: Add protection for bmp length out of range UBSAN load reports an exce…Check if you run itEPSS 0.74%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/policies/validation/condition/Patch nowKEVEPSS 7.89%Apr 17, 2024
- UnknownOpenMetadata SpEL Injection in GET /api/v1/events/subscriptions/validation/condition/Patch nowKEVEPSS 45.73%Apr 17, 2024
- UnknownThinkPHP ThinkPHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 28.73%Apr 11, 2024
- Medium5.9Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit ce…Check this weekEPSS 52.42%Apr 8, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx ma…Check if you run itEPSS 0.20%Apr 5, 2024
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.49%Apr 4, 2024
- Medium5.3Serverpod improved security for stored password hashesCheck if you run itEPSS 0.26%Mar 28, 2024
- UnknownQNAP QTS Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 1.56%Mar 24, 2024
- UnknownIBM operational_decision_manager Deserialization of Untrusted DataPatch nowKEVEPSS 73.40%Mar 22, 2024