Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8QNAP Photo Station Improper Access Control VulnerabilityPatch nowKEVEPSS 88.10%Dec 5, 2019
- Medium4.7shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesCheck if you run itEPSS 0.31%Dec 3, 2019
- Critical9.8freeswitch freeswitch Use of Hard-coded CredentialsPatch nowKEVEPSS 29.45%Dec 2, 2019
- High7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.Check if you run itEPSS 2.61%Nov 28, 2019
- Medium5.9SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.Check if you run itEPSS 2.71%Nov 27, 2019
- High7.5sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.Check if you run itEPSS 3.56%Nov 25, 2019
- High8.8Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 5.49%Nov 25, 2019
- Critical9.8Sangoma FreePBX Improper Authentication VulnerabilityPatch nowKEVEPSS 55.95%Nov 21, 2019
- Medium6.5Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 6.64%Nov 21, 2019
- Low3.3On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after…Check if you run itEPSS 0.41%Nov 19, 2019
- High7.8Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 30.17%Nov 12, 2019
- High7.8Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.59%Nov 12, 2019
- High7.8Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.60%Nov 12, 2019
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 77.29%Nov 12, 2019
- High8.8Google Chrome WebAudio Use-After-Free VulnerabilityPatch nowKEVEPSS 49.42%Oct 29, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.75%Oct 28, 2019
- High7.5Trend Micro OfficeScan Directory Traversal VulnerabilityPatch nowKEVEPSS 25.12%Oct 28, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0.Check if you run itEPSS 3.51%Oct 23, 2019
- High7.5GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels.Check if you run itEPSS 3.23%Oct 22, 2019
- High8.1In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…Check if you run itEPSS 3.81%Oct 21, 2019
- Critical9.8idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.Check if you run itEPSS 3.71%Oct 21, 2019
- High8.8Oracle Solaris Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.40%Oct 16, 2019
- Medium5.4There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 2.22%Oct 14, 2019
- Medium5.3There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 0.55%Oct 14, 2019
- Critical9.8Nostromo nhttpd Directory Traversal VulnerabilityPatch nowKEVEPSS 99.03%Oct 14, 2019
Sort