Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownRazer Sila Gaming Router v2.0.441_api-2.0.418 Local File InclusionPatch nowKEVEPSS 11.82%Nov 13, 2023
- High7.8GNU C Library Buffer Overflow VulnerabilityPatch nowKEVEPSS 63.77%Oct 3, 2023
- Medium4.8GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64Check if you run itEPSS 1.04%Sep 13, 2023
- High7.8Microsoft Streaming Service Proxy Privilege Escalation VulnerabilityPatch nowKEVEPSS 27.91%Sep 12, 2023
- Unknownchamilo chamilo Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 99.33%Jul 16, 2023
- High8.4Microsoft Streaming Service Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 21.62%Jun 13, 2023
- Unknownrazer sila_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.06%Apr 27, 2023
- High7.5The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.Check if you run itEPSS 5.02%Feb 8, 2023
- UnknownApache commons_text Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 99.93%Jan 12, 2023
- UnknownWindows Credential Roaming Service Elevation of Privilege VulnerabilityPatch nowKEVEPSS 1.63%Nov 8, 2022
- High7.1Microsoft Windows AppX Installer Spoofing VulnerabilityPatch nowKEVEPSS 11.29%Dec 14, 2021
- UnknownTerraMaster tos Improper Control of Dynamically-Managed Code ResourcesPatch nowKEVEPSS 28.98%Oct 11, 2021
- Unknowndebian debian_linux Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 90.99%Aug 17, 2021
- UnknownQNAP QTS Improper Input ValidationPatch nowKEVEPSS 1.76%Jul 28, 2021
- UnknownApache Shiro with Spring Dynamic Controllers Authentication BypassPatch nowKEVEPSS 23.33%Apr 12, 2021
- Unknowngetlaminas laminas-http Deserialization of Untrusted DataPatch nowKEVEPSS 75.31%Jan 14, 2021
- High7.5A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.Check if you run itEPSS 3.15%Dec 8, 2020
- High7.5sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family…Check if you run itEPSS 2.72%Dec 6, 2020
- Unknownwificam wireless_ip_camera_\(p2p\)_firmware Improper AuthenticationPatch nowKEVEPSS 4.30%Dec 1, 2020
- Unknowntelartis_bv awstats_totals Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 53.20%Dec 1, 2020
- UnknownApple darwin_streaming_server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 68.86%Dec 1, 2020
- Critical9.8Juniper Junos OS Path Traversal VulnerabilityPatch nowKEVEPSS 4.84%May 4, 2020
- Unknownidxbroker impress_for_idx_broker Missing AuthorizationPatch nowKEVEPSS 0.96%Mar 26, 2020
- Critical9.1Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to esca…Check if you run itEPSS 2.21%Jul 3, 2019
- UnknownHorde dynamic_imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.35%Feb 21, 2019