Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityPatch nowKEVEPSS 10.05%Aug 17, 2020
- Unknownelegantthemes divi Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.45%Aug 4, 2020
- UnknownOpenBSD openssh Incorrect AuthorizationPatch nowKEVEPSS 3.68%Jul 19, 2020
- Medium5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation.Check if you run itEPSS 2.95%Jun 29, 2020
- Critical9.8Sophos XG Firewall Buffer Overflow VulnerabilityPatch nowKEVEPSS 10.67%Jun 29, 2020
- Critical10.0Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 4.36%Jun 29, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…Check if you run itEPSS 2.23%Jun 1, 2020
- UnknownXootiX login\/signup_popup Missing AuthorizationPatch nowKEVEPSS 0.70%May 14, 2020
- High7.4GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS.Check if you run itEPSS 3.39%Apr 3, 2020
- High7.8VMware Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.25%Mar 17, 2020
- High8.8Trend Micro Multiple Products Content Validation Escape VulnerabilityPatch nowKEVEPSS 6.17%Mar 16, 2020
- Critical10.0Microsoft SMBv3 Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.81%Mar 12, 2020
- Critical9.8Zyxel Multiple NAS Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 99.99%Feb 24, 2020
- Medium6.5Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityPatch nowKEVEPSS 28.31%Feb 19, 2020
- Medium6.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial o…Check if you run itEPSS 6.62%Jan 30, 2020
- High8.2WhatsApp Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 67.86%Jan 21, 2020
- UnknownRemote Desktop Client Remote Code ExecutionPatch nowKEVEPSS 6.71%Jan 14, 2020
- Unknownyachtcontrol yachtcontrol Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 58.88%Dec 13, 2019
- High8.1In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…Check if you run itEPSS 3.81%Oct 21, 2019
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…Check if you run itEPSS 2.23%Oct 9, 2019
- UnknownD-Link DIR-300 Router Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 23.98%Jun 13, 2019
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 7.44%May 29, 2019
- Critical9.8Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 8.09%May 22, 2019
- Critical9.8Zyxel P660HN-T1A Routers Command Injection VulnerabilityPatch nowKEVEPSS 94.51%May 2, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed.Check if you run itEPSS 5.12%Mar 25, 2019