Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.Check if you run itEPSS 6.81%Dec 24, 2019
- High7.5xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.Check if you run itEPSS 5.63%Dec 24, 2019
- Medium5.3SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c.Check this weekEPSS 10.75%Dec 24, 2019
- High7.5flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view.Check if you run itEPSS 6.81%Dec 24, 2019
- Critical9.9MongoDB mongo-express Remote Code Execution VulnerabilityPatch nowKEVEPSS 84.73%Dec 24, 2019
- High7.5multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls.Check if you run itEPSS 8.02%Dec 23, 2019
- High7.5cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.Check if you run itEPSS 8.04%Dec 19, 2019
- High8.1[IMP] payment stripe: migrate to a direct payment flow The Reserve Bank of India (RBI) issued a directive (amended subsequently in December 2020 and March 2021) that i…Check if you run itEPSS 2.06%Dec 19, 2019
- Critical9.8A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.Check if you run itEPSS 2.74%Dec 18, 2019
- High7.5SonicWall SMA100 Directory Traversal VulnerabilityPatch nowKEVEPSS 4.01%Dec 18, 2019
- High7.8Apple Multiple Products Use-After-Free VulnerabilityPatch nowKEVEPSS 17.61%Dec 18, 2019
- High7.8Apple macOS Use-After-Free VulnerabilityPatch nowKEVEPSS 0.70%Dec 18, 2019
- High8.8Apple Multiple Products Type Confusion VulnerabilityPatch nowKEVEPSS 16.16%Dec 18, 2019
- Critical9.8IBM Planning Analytics Remote Code Execution VulnerabilityPatch nowKEVEPSS 86.44%Dec 18, 2019
- High7.5exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of windo…Check if you run itEPSS 6.94%Dec 18, 2019
- High7.5SonicWall SMA100 SQL Injection VulnerabilityPatch nowKEVEPSS 99.91%Dec 17, 2019
- Critical9.8Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.74%Dec 11, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 74.44%Dec 10, 2019
- Critical9.8pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.Check if you run itEPSS 7.40%Dec 9, 2019
- High7.5SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.Check this weekEPSS 10.98%Dec 9, 2019
- Medium5.5alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.Check if you run itEPSS 0.57%Dec 9, 2019
- Critical9.8VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.13%Dec 6, 2019
- Critical9.8lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or…Check if you run itEPSS 4.67%Dec 5, 2019
- Critical9.8QNAP Photo Station Path Traversal VulnerabilityPatch nowKEVEPSS 89.68%Dec 5, 2019
- Critical9.8QNAP Photo Station Path Traversal VulnerabilityPatch nowKEVEPSS 82.71%Dec 5, 2019
Sort