Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Samsung Mobile Devices Improper Boundary Check VulnerabilityPatch nowKEVEPSS 0.80%Dec 22, 2020
- Medium6.7Samsung Mobile Devices Unspecified VulnerabilityPatch nowKEVEPSS 0.80%Dec 22, 2020
- High7.5An issue was discovered in p11-kit 0.23.6 through 0.23.21.Check if you run itEPSS 3.53%Dec 16, 2020
- Medium5.3An issue was discovered in p11-kit 0.21.1 through 0.23.21.Check if you run itEPSS 2.27%Dec 16, 2020
- High7.5An issue was discovered in p11-kit 0.21.1 through 0.23.21.Check if you run itEPSS 3.47%Dec 16, 2020
- High7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.Check if you run itEPSS 4.63%Dec 14, 2020
- High7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.Check if you run itEPSS 9.77%Dec 14, 2020
- Low3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make cu…Check if you run itEPSS 3.90%Dec 14, 2020
- High7.5Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.Check if you run itEPSS 5.34%Dec 14, 2020
- High7.8curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.Check if you run itEPSS 1.29%Dec 14, 2020
- High7.5curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).Check if you run itEPSS 3.93%Dec 14, 2020
- Critical9.8CyberoamOS (CROS) SQL Injection VulnerabilityPatch nowKEVEPSS 4.70%Dec 11, 2020
- Critical9.8Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.25%Dec 10, 2020
- Medium4.4Samsung Mobile Devices Memory Corruption VulnerabilityPatch nowKEVEPSS 0.89%Dec 10, 2020
- Medium5.5Samsung Mobile Devices Improper Access Control VulnerabilityPatch nowKEVEPSS 1.08%Dec 10, 2020
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 78.38%Dec 10, 2020
- High8.4Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 36.51%Dec 9, 2020
- High7.5A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.Check if you run itEPSS 3.15%Dec 8, 2020
- High7.5sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family…Check if you run itEPSS 2.72%Dec 6, 2020
- Medium4.8The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the co…Check if you run itEPSS 1.68%Dec 4, 2020
- Critical9.1Multiple VMware Products Command Injection VulnerabilityPatch nowKEVEPSS 17.30%Nov 23, 2020
- High8.8Drupal core Un-restricted Upload of FilePatch nowKEVEPSS 36.17%Nov 20, 2020
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.55%Nov 19, 2020
- Medium5.5Qualcomm Multiple Chipsets Detection of Error Condition Without Action VulnerabilityPatch nowKEVEPSS 0.52%Nov 17, 2020
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.54%Nov 17, 2020
Sort