Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityPatch nowKEVEPSS 25.44%May 31, 2019
- Critical9.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityPatch nowKEVEPSS 83.74%May 31, 2019
- Critical9.8SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.Check this weekEPSS 45.43%May 30, 2019
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 7.44%May 29, 2019
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 99.99%May 29, 2019
- Medium6.5Fortinet FortiOS and FortiProxy Out-of-bounds WritePatch nowKEVEPSS 33.65%May 29, 2019
- High7.8A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.Check this weekEPSS 49.74%May 28, 2019
- Low3.7An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.Check if you run itEPSS 5.66%May 28, 2019
- Critical9.8deltek maconomy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 84.22%May 24, 2019
- High8.1stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate in…Check if you run itEPSS 2.74%May 22, 2019
- Critical9.8Schneider Electric U.motion Builder SQL Injection VulnerabilityPatch nowKEVEPSS 72.49%May 22, 2019
- Medium5.4Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection.Check if you run itEPSS 2.66%May 22, 2019
- Critical9.8Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 8.09%May 22, 2019
- High8.8Microsoft GDI Remote Code Execution VulnerabilityPatch nowKEVEPSS 21.71%May 16, 2019
- Critical9.8Microsoft Remote Desktop Services Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%May 16, 2019
- Critical9.8LG N1A1 NAS Remote Command Execution VulnerabilityPatch nowKEVEPSS 89.25%May 14, 2019
- High7.8Microsoft Windows Error Reporting (WER) Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.21%May 14, 2019
- Critical9.8WhatsApp VOIP Stack Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.08%May 13, 2019
- High8.1An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.Check if you run itEPSS 6.68%May 10, 2019
- Critical9.8revive-sas revive_adserver Deserialization of Untrusted DataPatch nowKEVEPSS 57.02%May 6, 2019
- High8.8Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 27.26%May 6, 2019
- Critical9.8Zyxel P660HN-T1A Routers Command Injection VulnerabilityPatch nowKEVEPSS 94.51%May 2, 2019
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityPatch nowKEVEPSS 100.00%May 1, 2019
- Critical9.8Crestron Multiple Products Command Injection VulnerabilityPatch nowKEVEPSS 98.95%Apr 30, 2019
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 81.04%Apr 30, 2019
Sort