Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownQNAP QTS Improper AuthenticationPatch nowKEVEPSS 24.37%Mar 18, 2024
- UnknownIBM operational_decision_manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 76.40%Mar 17, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to synchro…Check if you run itEPSS 0.16%Mar 6, 2024
- UnknownCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 1.09%Feb 8, 2024
- Unknownmin minio_console Missing Authentication for Critical FunctionPatch nowKEVEPSS 48.13%Jan 22, 2024
- UnknownZTE mf971r_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 55.71%Jan 22, 2024
- UnknownApache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 63.37%Jan 21, 2024
- UnknownMicro Focus application_performance_management Use of Hard-coded CredentialsPatch nowKEVEPSS 74.45%Jan 13, 2024
- High8.8Google Chromium V8 Out-of-Bounds Memory Access VulnerabilityPatch nowKEVEPSS 3.80%Jan 11, 2024
- UnknownVMware vrealize_log_insight Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 87.08%Dec 20, 2023
- Critical9.1A flaw was found in Quarkus.Check if you run itEPSS 0.81%Dec 9, 2023
- Unknownalibaba nacos Missing Authentication for Critical FunctionPatch nowKEVEPSS 65.72%Nov 19, 2023
- UnknownCisco evolved_programmable_network_manager Improper Input ValidationPatch nowKEVEPSS 98.05%Nov 15, 2023
- Unknownsearchblox searchblox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.98%Nov 13, 2023
- UnknownWeaver e-cology Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.18%Oct 14, 2023
- UnknownProgress WS_FTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.01%Oct 9, 2023
- High8.8Progress WS_FTP Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 90.35%Sep 27, 2023
- UnknownFirefox for Android iframe Sandbox Bypass via intent: url Scheme VulnerabilityPatch nowKEVEPSS 0.79%Sep 27, 2023
- Medium5.5Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 1.10%Sep 18, 2023
- Medium4.8GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64Check if you run itEPSS 1.04%Sep 13, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.12%Aug 29, 2023
- Low3.3Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay.Check if you run itEPSS 0.37%Aug 22, 2023
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 41.38%Aug 16, 2023
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 70.17%Jul 19, 2023
- Critical9.8Zyxel Multiple NAS Devices Command Injection VulnerabilityPatch nowKEVEPSS 82.83%Jun 19, 2023