Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.13%Dec 6, 2019
- UnknownCVE-2019-6477: TCP-pipelined queries can bypass tcp-clients limit - Security Advisories By design, BIND is intended to limit the number of TCP clients that can be conn…Check if you run itEPSS 4.13%Nov 21, 2019
- UnknownCVE-2019-6477: TCP-pipelined queries can bypass tcp-clients limit - Security Advisories By design, BIND is intended to limit the number of TCP clients that can be conn…Check if you run itEPSS 6.43%Nov 21, 2019
- Critical9.8Sangoma FreePBX Improper Authentication VulnerabilityPatch nowKEVEPSS 55.95%Nov 21, 2019
- High8.8Google Chrome WebAudio Use-After-Free VulnerabilityPatch nowKEVEPSS 49.42%Oct 29, 2019
- UnknownMicrosoft Guidance to mitigate L1TF variant - ADV180018 (CVE-2018-3620)Check if you run itEPSS 5.58%Oct 12, 2019
- UnknownCVE-2019-17370 OTCMS v385 allows arbitrary PHP Code Execution because admin[.][.]Check if you run itEPSS 2.07%Oct 10, 2019
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 72.10%Sep 26, 2019
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Sep 24, 2019
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 52.45%Sep 23, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 9.87%Jul 9, 2019
- UnknownRuby gem strong_password Backdoored On July 5th, 2019, the CVE-2019-13354 security advisory was published for a malicious version of the strong_password Ruby gem which…Check if you run itEPSS 3.33%Jul 8, 2019
- Critical9.8Nice Linear eMerge E3-Series OS Command Injection VulnerabilityPatch nowKEVEPSS 97.08%Jul 2, 2019
- UnknownASUS dsl-n12e_c1_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.75%Jun 13, 2019
- Critical9.8Exim Mail Transfer Agent (MTA) Improper Input ValidationPatch nowKEVEPSS 99.96%Jun 5, 2019
- Critical9.8Fortinet FortiOS SSL VPN Path Traversal VulnerabilityPatch nowKEVEPSS 100.00%Jun 4, 2019
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 99.99%May 29, 2019
- Critical9.8Schneider Electric U.motion Builder SQL Injection VulnerabilityPatch nowKEVEPSS 72.49%May 22, 2019
- Critical9.8Microsoft Remote Desktop Services Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%May 16, 2019
- Critical9.8Zyxel P660HN-T1A Routers Command Injection VulnerabilityPatch nowKEVEPSS 94.51%May 2, 2019
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityPatch nowKEVEPSS 100.00%May 1, 2019
- Critical9.8Oracle WebLogic Server, InjectionPatch nowKEVEPSS 99.98%Apr 26, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 98.54%Apr 25, 2019
- Critical9.8Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 99.91%Mar 25, 2019
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 72.95%Mar 24, 2019
Sort