Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept…Check this weekEPSS 24.22%Jan 19, 2021
- High7.5PEAR Archive_Tar Improper Link Resolution VulnerabilityPatch nowKEVEPSS 70.59%Jan 18, 2021
- Medium4.4Samsung Mobile Devices Insertion of Sensitive Information Into Log File VulnerabilityPatch nowKEVEPSS 2.55%Jan 17, 2021
- Critical9.8Laravel Ignition File Upload VulnerabilityPatch nowKEVEPSS 99.94%Jan 12, 2021
- High7.8Microsoft Defender Remote Code Execution VulnerabilityPatch nowKEVEPSS 39.65%Jan 12, 2021
- High7.5Apache Flink Improper Access Control VulnerabilityPatch nowKEVEPSS 97.81%Jan 5, 2021
- Medium5.9The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.Check if you run itEPSS 3.56%Jan 4, 2021
- Medium6.4Samsung Mobile Devices Race Condition VulnerabilityPatch nowKEVEPSS 0.37%Dec 31, 2020
- Medium6.4Samsung Mobile Devices Race Condition VulnerabilityPatch nowKEVEPSS 0.40%Dec 31, 2020
- Critical9.8SolarWinds Orion Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.98%Dec 29, 2020
- Medium6.1Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 32.92%Dec 28, 2020
- Critical9.8Zyxel Multiple Products Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 90.16%Dec 22, 2020
- High8.8A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users…Check if you run itEPSS 3.11%Dec 22, 2020
- Medium4.3[REF] web_tour: prepare to change the default action in tour_compiler Currently, in tour_compiler, to check that an element is actually present in the DOM in a step, t…Check if you run itEPSS 0.70%Dec 22, 2020
- Medium4.3Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain…Check if you run itEPSS 1.49%Dec 22, 2020
- Medium6.5Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to ob…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to…Check if you run itEPSS 1.46%Dec 22, 2020
- High8.8[PERF] account, l10n_*: Improve batch send and print performances Problem --------- When doing the Send & Print on one invoice, or when multiple invoices are selected…Check if you run itEPSS 2.08%Dec 22, 2020
- Medium6.5Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrar…Check if you run itEPSS 0.88%Dec 22, 2020
- Medium5.4Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to…Check if you run itEPSS 0.71%Dec 22, 2020
- Medium5.4Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary we…Check if you run itEPSS 0.70%Dec 22, 2020
- Medium6.1Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to inject ar…Check if you run itEPSS 0.91%Dec 22, 2020
- Medium6.1Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to inject arbitr…Check if you run itEPSS 0.89%Dec 22, 2020
- Critical9.1Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an…Check if you run itEPSS 1.18%Dec 22, 2020
Sort