Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for…Check if you run itEPSS 1.02%Jun 27, 2020
- Medium5.9Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a…Check this weekEPSS 12.71%Jun 18, 2020
- Medium5.4Treck TCP/IP stack Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 18.42%Jun 17, 2020
- Critical9.8trendnet tew-827dru_firmware Out-of-bounds WritePatch nowKEVEPSS 2.35%Jun 15, 2020
- High8.8pandorafms pandora_fms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.99%Jun 11, 2020
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 16.41%Jun 9, 2020
- Medium6.1Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 76.60%Jun 8, 2020
- High7.5SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.Check if you run itEPSS 4.45%Jun 6, 2020
- High7.5regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.Check if you run itEPSS 5.97%Jun 5, 2020
- High8.6Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.Check if you run itEPSS 4.88%Jun 5, 2020
- High8.2Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.Check this weekEPSS 11.33%Jun 5, 2020
- High7.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 0.83%Jun 5, 2020
- Critical9.8QNAP NAS File Station Command Injection VulnerabilityPatch nowKEVEPSS 30.16%Jun 5, 2020
- High7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).Check this weekEPSS 22.28%Jun 4, 2020
- Critical9.8rConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 32.12%Jun 4, 2020
- Medium6.7systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges whe…Check if you run itEPSS 0.46%Jun 3, 2020
- High7.5VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityPatch nowKEVEPSS 95.59%Jun 2, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…Check if you run itEPSS 2.23%Jun 1, 2020
- High7.2Pi-Hole AdminLTE Remote Code Execution VulnerabilityPatch nowKEVEPSS 78.34%May 29, 2020
- Medium5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.Check if you run itEPSS 0.60%May 27, 2020
- Medium5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.Check if you run itEPSS 0.66%May 27, 2020
- High7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.Check if you run itEPSS 1.02%May 27, 2020
- Medium5.5SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.Check if you run itEPSS 0.64%May 24, 2020
- Medium5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.Check if you run itEPSS 1.00%May 24, 2020
- High8.8Apache Kylin OS Command Injection VulnerabilityPatch nowKEVEPSS 97.39%May 22, 2020
Sort