Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.Check if you run itEPSS 1.40%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary…Check if you run itEPSS 0.56%Apr 25, 2023
- High7.5Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports…Check if you run itEPSS 0.88%Apr 25, 2023
- High8.7A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents o…Check if you run itEPSS 0.64%Apr 25, 2023
- High7.5Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment m…Check if you run itEPSS 0.56%Apr 25, 2023
- Medium6.5Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated u…Check if you run itEPSS 0.78%Apr 25, 2023
- High8.7A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.Check if you run itEPSS 0.64%Apr 25, 2023
- High7.5Service Location Protocol (SLP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 63.98%Apr 25, 2023
- Medium6.5An issue was discovered in libxml2 before 2.10.4.Check if you run itEPSS 1.31%Apr 24, 2023
- Medium6.5In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault.Check if you run itEPSS 1.24%Apr 24, 2023
- Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityPatch nowKEVEPSS 99.28%Apr 24, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 98.15%Apr 24, 2023
- Medium5.5An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2.Check if you run itEPSS 0.38%Apr 24, 2023
- High7.5PaperCut NG/MF Improper Authentication VulnerabilityPatch nowKEVEPSS 78.05%Apr 20, 2023
- High7.2Strapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 70.60%Apr 19, 2023
- Medium4.9Strapi Cleartext Storage of Sensitive Information VulnerabilityPatch nowKEVEPSS 4.11%Apr 19, 2023
- High8.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check this weekEPSS 77.75%Apr 19, 2023
- Critical9.8PaperCut MF/NG Improper Access Control VulnerabilityPatch nowKEVEPSS 100.00%Apr 18, 2023
- High8.8Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositorie…Check if you run itEPSS 2.07%Apr 17, 2023
- Low3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger).Check if you run itEPSS 0.43%Apr 14, 2023
- High7.8ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo data…Check if you run itEPSS 0.98%Apr 14, 2023
- High7.2Cisco Small Business RV Series Routers Command Injection VulnerabilityPatch nowKEVEPSS 54.11%Apr 13, 2023
- Critical9.8idnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.02%Apr 12, 2023
- Critical9.6Google Chrome Skia Integer Overflow VulnerabilityPatch nowKEVEPSS 5.74%Apr 12, 2023
- High7.0Microsoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.67%Apr 11, 2023
Sort