Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Oct 10, 2022
- High8.8Google Chromium Network Service Use-After-Free VulnerabilityPatch nowKEVEPSS 24.93%Sep 26, 2022
- Critical9.6Google Chromium Mojo Insufficient Data Validation VulnerabilityPatch nowKEVEPSS 5.85%Aug 30, 2022
- High7.0A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring().Check if you run itEPSS 0.38%Aug 25, 2022
- UnknownVMware vRealize Operations Authentication BypassPatch nowKEVEPSS 0.83%Aug 10, 2022
- High7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).Check if you run itEPSS 0.90%Jul 29, 2022
- High7.8io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP.Check if you run itEPSS 0.31%Jul 22, 2022
- Medium6.5Google Chromium Intents Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 4.56%Jul 19, 2022
- Critical9.8When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name t…Check this weekEPSS 12.32%Jul 7, 2022
- UnknownCisco application_extension_platform Stack-based Buffer OverflowPatch nowKEVEPSS 18.50%Jun 22, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Check this weekEPSS 96.39%Jun 21, 2022
- Medium5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclos…Check if you run itEPSS 6.45%Jun 15, 2022
- UnknownThunderbird for Windows ms-msdt, search, and search-ms Protocols VulnerabilityPatch nowKEVEPSS 0.78%Jun 15, 2022
- High7.5RARLAB UnRAR Directory Traversal VulnerabilityPatch nowKEVEPSS 99.23%May 9, 2022
- Critical9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query.Check this weekEPSS 64.49%May 4, 2022
- High7.5The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries.Check if you run itEPSS 4.58%May 3, 2022
- High7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.Check this weekEPSS 82.61%May 3, 2022
- Medium6.8Zoho ManageEngine ADSelfService Plus Remote Code Execution VulnerabilityPatch nowKEVEPSS 70.97%Apr 14, 2022
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 13.92%Apr 13, 2022
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 24.73%Mar 23, 2022
- High7.5The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.Check this weekEPSS 73.19%Mar 15, 2022
- High8.8Google Chromium Animation Use-After-Free VulnerabilityPatch nowKEVEPSS 22.44%Feb 10, 2022
- High7.1Microsoft Windows AppX Installer Spoofing VulnerabilityPatch nowKEVEPSS 11.29%Dec 14, 2021
- High8.8Google Chromium V8 Use-After-Free VulnerabilityPatch nowKEVEPSS 7.84%Dec 9, 2021
- High8.8Google Chromium V8 Memory Corruption VulnerabilityPatch nowKEVEPSS 38.57%Oct 26, 2021