Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated u…Check if you run itEPSS 1.16%Jul 3, 2019
- High8.1Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.Check if you run itEPSS 0.95%Jul 3, 2019
- Medium6.5Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to d…Check if you run itEPSS 0.79%Jul 3, 2019
- Medium6.5Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed…Check if you run itEPSS 0.95%Jul 3, 2019
- Medium4.3Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to acce…Check if you run itEPSS 0.77%Jul 3, 2019
- High7.5DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityPatch nowKEVEPSS 74.05%Jul 3, 2019
- High7.5DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityPatch nowKEVEPSS 76.30%Jul 3, 2019
- High7.8A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run th…Check if you run itEPSS 0.69%Jul 2, 2019
- Critical9.8Nice Linear eMerge E3-Series OS Command Injection VulnerabilityPatch nowKEVEPSS 97.08%Jul 2, 2019
- Medium6.5Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to…Check if you run itEPSS 1.81%Jun 28, 2019
- Medium4.9The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privi…Check if you run itEPSS 1.23%Jun 28, 2019
- Critical9.8Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a data…Check if you run itEPSS 2.22%Jun 28, 2019
- Medium6.5Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other use…Check if you run itEPSS 0.59%Jun 28, 2019
- Medium5.3Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on beh…Check if you run itEPSS 1.40%Jun 28, 2019
- High7.5In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources whilCheck if you run itEPSS 7.11%Jun 24, 2019
- Medium5.9In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes.Check if you run itEPSS 2.21%Jun 20, 2019
- Critical10.0Mozilla Firefox and Thunderbird Sandbox Escape VulnerabilityPatch nowKEVEPSS 55.87%Jun 20, 2019
- Critical9.8BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.Check if you run itEPSS 7.98%Jun 19, 2019
- High8.8Mozilla Firefox and Thunderbird Type Confusion VulnerabilityPatch nowKEVEPSS 37.70%Jun 18, 2019
- High7.8Microsoft Task Scheduler Privilege Escalation VulnerabilityPatch nowKEVEPSS 6.12%Jun 12, 2019
- High7.8Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 6.89%Jun 12, 2019
- Critical9.8Ubiquiti AirOS Command Injection VulnerabilityPatch nowKEVEPSS 40.23%Jun 11, 2019
- Critical9.8A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3…Check if you run itEPSS 5.23%Jun 7, 2019
- Critical9.8Exim Mail Transfer Agent (MTA) Improper Input ValidationPatch nowKEVEPSS 99.96%Jun 5, 2019
- High7.5Fortinet FortiOS and FortiProxy Improper AuthorizationPatch nowKEVEPSS 81.69%Jun 4, 2019
Sort