Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8EyesOfNetwork Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 91.87%Feb 6, 2020
- Critical9.8PlaySMS Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 86.69%Feb 5, 2020
- High8.8Cisco IOS XR Software Discovery Protocol Format String VulnerabilityPatch nowKEVEPSS 11.68%Feb 5, 2020
- High7.5Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.Check if you run itEPSS 5.64%Feb 4, 2020
- Critical9.8Multiple DrayTek Vigor Routers Web Management Page VulnerabilityPatch nowKEVEPSS 99.99%Feb 1, 2020
- Medium6.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial o…Check if you run itEPSS 6.62%Jan 30, 2020
- Critical9.8OpenSMTPD Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.97%Jan 29, 2020
- Medium5.5In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy…Check if you run itEPSS 1.51%Jan 28, 2020
- High7.5xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.Check if you run itEPSS 7.84%Jan 21, 2020
- High7.5xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.Check if you run itEPSS 3.18%Jan 21, 2020
- High8.2WhatsApp Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 67.86%Jan 21, 2020
- Critical9.8Oracle Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.12%Jan 15, 2020
- Critical9.8Oracle Fusion Middleware Unspecified VulnerabilityPatch nowKEVEPSS 92.82%Jan 15, 2020
- Critical9.8Microsoft .NET Framework Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.22%Jan 14, 2020
- High7.8Microsoft Update Notification Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 2.37%Jan 14, 2020
- High8.1Microsoft Windows CryptoAPI Spoofing VulnerabilityPatch nowKEVEPSS 89.08%Jan 14, 2020
- Critical9.1nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).Check if you run itEPSS 2.87%Jan 8, 2020
- Medium6.7A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.Check if you run itEPSS 1.08%Jan 8, 2020
- High8.8Mozilla Firefox And Thunderbird Type Confusion VulnerabilityPatch nowKEVEPSS 46.31%Jan 7, 2020
- High7.5ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-managemen…Check if you run itEPSS 3.42%Jan 3, 2020
- High7.5selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.Check if you run itEPSS 3.74%Jan 2, 2020
- Critical9.8D-Link DIR-859 Router Command Execution VulnerabilityPatch nowKEVEPSS 90.61%Dec 30, 2019
- High7.5Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.57%Dec 30, 2019
- High7.5TVT NVMS-1000 Directory Traversal VulnerabilityPatch nowKEVEPSS 96.07%Dec 29, 2019
- Critical9.8Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Dec 27, 2019
Sort