Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8OpenBSD openssh Inappropriate Encoding for Output ContextPatch nowKEVEPSS 24.90%Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.Patch nowKEVEPSS 3.81%Jan 31, 2019
- High7.5Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityPatch nowKEVEPSS 99.88%Jan 24, 2019
- High7.2Cisco Small Business Routers Improper Input Validation VulnerabilityPatch nowKEVEPSS 95.92%Jan 24, 2019
- Medium4.3Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityPatch nowKEVEPSS 38.09%Jan 22, 2019
- Medium5.3In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespac…Check if you run itEPSS 0.48%Jan 21, 2019
- High7.8The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for si…Check if you run itEPSS 0.45%Jan 18, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.42%Jan 13, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.72%Jan 8, 2019
- High8.8Microsoft MSHTML Remote Code Execution VulnerabilityPatch nowKEVEPSS 53.20%Jan 8, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphi…Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorp…Check this weekEPSS 10.60%Jan 2, 2019
- Critical10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2…Check this weekEPSS 10.46%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes f…Check if you run itEPSS 7.52%Jan 2, 2019
- Medium4.7GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_Check if you run itEPSS 0.53%Dec 26, 2018
- High7.5Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt.Check if you run itEPSS 5.79%Dec 23, 2018
- Critical9.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.36%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 1.82%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.70%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 4.60%Dec 21, 2018
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 29.61%Dec 19, 2018
- High7.5Apache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Dec 13, 2018
- High7.8Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityPatch nowKEVEPSS 22.18%Dec 11, 2018
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.53%Dec 11, 2018
Sort