● Live advisory feed
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
A remote, anonymous attacker can exploit a vulnerability in Cisco Secure Firewall Management Center to disclose information.
A local attacker can exploit a vulnerability in the Linux Kernel for privilege escalation, as well as to create a denial of service condition or other unspecified impacts.
An attacker can exploit multiple vulnerabilities in MariaDB to conduct an unspecified attack.
An attacker can exploit multiple vulnerabilities in PostgreSQL to execute arbitrary program code, carry out a denial-of-service attack, disclose information, manipulate files, conduct an SQL injection attack, and bypass security measures.
A remote anonymous attacker can exploit multiple vulnerabilities in Kiali for Red Hat OpenShift Service Mesh to gain elevated privileges, bypass security measures, manipulate or disclose data, or cause a denial-of-service condition.
A remote, authenticated attacker can exploit a vulnerability in TeamViewer to bypass security measures.
A remote, authenticated attacker can exploit a vulnerability in PackageKit to bypass security measures.
An attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to bypass security measures and execute arbitrary code.
A remote, anonymous attacker can exploit a vulnerability in ImageMagick to carry out an unspecified attack.
A local attacker can exploit a vulnerability in the Linux Kernel to elevate their privileges.
An attacker can exploit multiple vulnerabilities in PHP to execute arbitrary code, perform SQL injection or cross-site scripting attacks, manipulate data, disclose confidential information, or cause a denial-of-service condition.
An attacker can exploit multiple vulnerabilities in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira, and Jira Service Management to execute arbitrary code, gain elevated permissions, bypass security measures, manipulate data, disclose confidential information, or…
A local attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to escalate their privileges and manipulate data.
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to gain administrator rights.
An attacker can exploit multiple vulnerabilities in Xen and Citrix Systems XenServer to escalate privileges, bypass security measures, modify and disclose data, or cause a denial-of-service condition.
An attacker can exploit multiple vulnerabilities in libssh to gain elevated privileges, bypass security measures, disclose confidential information, trigger a denial-of-service attack, and manipulate data.
An attacker can exploit multiple vulnerabilities in Netty to bypass security measures and manipulate data.
A remote, anonymous attacker can exploit multiple vulnerabilities in GNU libc to execute arbitrary code, cause a denial-of-service condition, or disclose confidential information.
A local attacker can exploit multiple vulnerabilities in Red Hat Hardened Images RPMs to conduct a Denial of Service attack.
A local attacker can exploit multiple vulnerabilities in X.Org X11 to gain elevated privileges and execute arbitrary code with root rights.
An attacker can exploit multiple vulnerabilities in Ruby to disclose information, carry out a Denial of Service attack, and execute arbitrary code.
An attacker can exploit multiple vulnerabilities in Netty to bypass security checks, manipulate requests or headers, circumvent certificate checks, and cause a denial of service.
A remote, anonymous attacker can exploit a vulnerability in 7-Zip to execute arbitrary program code.
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat OpenShift Container Platform to bypass security measures or trigger a Denial-of-Service condition.
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to execute arbitrary code with user privileges.
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache log4j and Apache Log4cxx to manipulate files.
A remote, authenticated attacker can exploit a vulnerability in IBM WebSphere Application Server to execute arbitrary actions on the server.
An attacker can exploit multiple vulnerabilities in GIMP to execute arbitrary program code and conduct a denial of service attack.
An attacker can exploit multiple vulnerabilities in Apache Camel to execute arbitrary program code, bypass security measures, perform server-side request forgery, disclose confidential information, or manipulate data.
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux and Red Hat Satellite to disclose information or execute arbitrary code.
A local attacker can exploit a vulnerability in GIMP to execute arbitrary program code and to carry out a denial of service attack.
An attacker can exploit multiple vulnerabilities in Apache log4j to manipulate files.
A local attacker can exploit a vulnerability in GIMP to conduct a denial of service attack and potentially execute arbitrary code.
An attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct an unspecified attack, potentially triggering a denial-of-service condition, bypassing security measures, or causing memory corruption.
An attacker can exploit multiple vulnerabilities in Red Hat Satellite to gain elevated privileges, including administrative rights, bypass authentication, manipulate data, disclose confidential information, and cause a Denial of Service condition.
An attacker can exploit multiple vulnerabilities in GStreamer to cause a denial-of-service condition or potentially execute arbitrary code.
An attacker can exploit multiple vulnerabilities in IBM WebSphere Application Server to conduct a Cross-Site Scripting attack and disclose confidential information.
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux to execute arbitrary program code with the rights of the service.
A remote, anonymous attacker can exploit multiple vulnerabilities in FasterXML Jackson to bypass protections and authorization rules, manipulate data, disclose information, or cause a Denial-of-Service.
An attacker can exploit multiple vulnerabilities in CUPS to bypass security measures, execute arbitrary code, gain elevated privileges, manipulate data, or cause a denial-of-service condition.
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (crun) to escalate their privileges.
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Ansible Automation Platform to conduct a Denial of Service attack, execute arbitrary code, bypass security measures, manipulate data, disclose confidential information, or conduct cross-site scripting at…
An attacker can exploit multiple vulnerabilities in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira, and Jira Service Management to execute arbitrary code, gain elevated privileges, bypass security measures, manipulate data, disclose confidential information, or …
An attacker can exploit multiple vulnerabilities in DriveLock to disclose information or perform SQL injection, which may lead to privilege escalation.
An attacker can exploit multiple vulnerabilities in Red Hat Ansible Automation Platform to bypass security precautions, disclose information, manipulate data, and cause a denial-of-service condition.
An attacker can exploit multiple vulnerabilities in GStreamer to conduct a Denial of Service attack, manipulate data, or disclose confidential information.
A remote, authenticated attacker can exploit multiple vulnerabilities in Apache CXF to bypass security measures, conduct XML External Entity attacks, manipulate data, or disclose confidential information.
An attacker can exploit multiple vulnerabilities in Golang Go to carry out an unspecified attack.
A remote, authenticated attacker can exploit multiple vulnerabilities in Red Hat Quay to execute arbitrary code and perform server-side request forgery attacks.
An attacker can exploit multiple vulnerabilities in OpenSSL to execute arbitrary code, bypass security measures, disclose confidential information, manipulate data, or cause a denial-of-service condition.