Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input.Check this weekEPSS 10.45%Oct 14, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.84%Oct 10, 2019
- High7.8Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.48%Oct 10, 2019
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…Check if you run itEPSS 2.23%Oct 9, 2019
- Critical9.8Exim Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 41.64%Sep 27, 2019
- Critical9.8D-Link Multiple Routers Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Sep 27, 2019
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 72.10%Sep 26, 2019
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.Check if you run itEPSS 0.55%Sep 25, 2019
- High7.5An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.Check if you run itEPSS 1.10%Sep 24, 2019
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Sep 24, 2019
- Medium6.5Google Chromium V8 Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 55.93%Sep 24, 2019
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 52.45%Sep 23, 2019
- Critical9.8Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.Check this weekEPSS 17.94%Sep 16, 2019
- Critical9.8Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.Check if you run itEPSS 7.46%Sep 16, 2019
- Critical9.8D-Link DNS-320 Remote Code Execution VulnerabilityPatch nowKEVEPSS 86.49%Sep 16, 2019
- Critical9.8SIMalliance Toolbox Browser Command Injection VulnerabilityPatch nowKEVEPSS 4.95%Sep 12, 2019
- High8.8Microsoft Excel Remote Code Execution VulnerabilityPatch nowKEVEPSS 21.80%Sep 11, 2019
- High7.8Microsoft Windows AppX Deployment Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 11.62%Sep 11, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.25%Sep 10, 2019
- High7.8Microsoft Windows Privilege Common Log File System (CLFS) Escalation VulnerabilityPatch nowKEVEPSS 1.42%Sep 10, 2019
- Medium6.5In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a…Check if you run itEPSS 4.22%Sep 9, 2019
- High7.5An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.Check if you run itEPSS 5.12%Sep 6, 2019
- High8.8Nagios XI Remote Code Execution VulnerabilityPatch nowKEVEPSS 77.04%Sep 5, 2019
- High7.5In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLin…Check if you run itEPSS 6.64%Sep 4, 2019
- High7.5The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing t…Check if you run itEPSS 3.18%Sep 2, 2019
Sort