Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.Check if you run itEPSS 2.99%Mar 17, 2023
- High8.6Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 97.34%Mar 14, 2023
- Medium5.3Joomla! Improper Access Control VulnerabilityPatch nowKEVEPSS 99.83%Feb 16, 2023
- Medium4.4A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with…Check if you run itEPSS 0.33%Aug 24, 2022
- Medium5.3Zabbix Frontend Improper Access Control VulnerabilityPatch nowKEVEPSS 95.26%Jan 13, 2022
- Critical9.8Citrix ShareFile Improper Access Control VulnerabilityPatch nowKEVEPSS 53.59%Sep 23, 2021
- High7.8McAfee Total Protection (MTP) Improper Privilege Management VulnerabilityPatch nowKEVEPSS 1.03%Feb 10, 2021
- Critical9.8QNAP Helpdesk Improper Access Control VulnerabilityPatch nowKEVEPSS 1.98%Feb 3, 2021
- Medium4.3[REF] web_tour: prepare to change the default action in tour_compiler Currently, in tour_compiler, to check that an element is actually present in the DOM in a step, t…Check if you run itEPSS 0.70%Dec 22, 2020
- Medium4.3Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain…Check if you run itEPSS 1.49%Dec 22, 2020
- Medium6.5Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to ob…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to…Check if you run itEPSS 1.46%Dec 22, 2020
- Medium6.5Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrar…Check if you run itEPSS 0.88%Dec 22, 2020
- Medium4.3Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityPatch nowKEVEPSS 26.33%Jul 10, 2020
- Medium6.5Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass VulnerabilityPatch nowKEVEPSS 88.41%Jul 10, 2020
- High8.1[IMP] payment stripe: migrate to a direct payment flow The Reserve Bank of India (RBI) issued a directive (amended subsequently in December 2020 and March 2021) that i…Check if you run itEPSS 2.06%Dec 19, 2019
- High8.1Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset th…Check if you run itEPSS 0.96%Jul 3, 2019
- Medium6.5Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated u…Check if you run itEPSS 1.18%Jul 3, 2019
- High8.1Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.Check if you run itEPSS 0.96%Jul 3, 2019
- Critical9.8Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a data…Check if you run itEPSS 2.22%Jun 28, 2019
- Medium5.3Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on beh…Check if you run itEPSS 1.40%Jun 28, 2019
- Critical9.8Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 8.09%May 22, 2019
- High8.8Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.Check if you run itEPSS 7.78%Apr 9, 2019
- Medium6.5Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail the…Check if you run itEPSS 1.37%Apr 9, 2019