Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Oracle WebLogic Server, InjectionPatch nowKEVEPSS 99.98%Apr 26, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 98.54%Apr 25, 2019
- High7.2Oracle BI Publisher Unauthorized Access VulnerabilityPatch nowKEVEPSS 92.18%Apr 23, 2019
- High8.8Atlassian Confluence Server and Data Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.03%Apr 18, 2019
- High7.8Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 41.40%Apr 9, 2019
- High7.5Microsoft Internet Explorer Type Confusion VulnerabilityPatch nowKEVEPSS 81.68%Apr 9, 2019
- High8.8Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.Check if you run itEPSS 7.78%Apr 9, 2019
- Medium6.1Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitr…Check if you run itEPSS 1.00%Apr 9, 2019
- Medium6.5Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail the…Check if you run itEPSS 1.37%Apr 9, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 45.23%Apr 9, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- High7.2Reolink Multiple IP Cameras OS Command Injection VulnerabilityPatch nowKEVEPSS 37.54%Apr 8, 2019
- High7.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 2.37%Apr 3, 2019
- High7.5Rails Ruby on Rails Path Traversal VulnerabilityPatch nowKEVEPSS 98.51%Mar 27, 2019
- Critical9.8Kentico Xperience Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 95.07%Mar 26, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed.Check if you run itEPSS 5.12%Mar 25, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed.Check if you run itEPSS 5.42%Mar 25, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit sign…Check if you run itEPSS 6.13%Mar 25, 2019
- High8.8An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.Check if you run itEPSS 6.13%Mar 25, 2019
- High8.8A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side.Check if you run itEPSS 3.44%Mar 25, 2019
- Critical10.0Kibana Arbitrary Code ExecutionPatch nowKEVEPSS 95.34%Mar 25, 2019
- Critical9.8Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 99.91%Mar 25, 2019
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 72.95%Mar 24, 2019
- Critical9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: UR…Check this weekEPSS 11.84%Mar 23, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.Check if you run itEPSS 5.25%Mar 23, 2019
Sort