Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Oracle WebLogic Server Console Component Remote Code ExecutionPatch nowKEVEPSS 70.45%Jan 20, 2021
- Critical9.8Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept…Check this weekEPSS 24.22%Jan 19, 2021
- UnknownTerraMaster tos Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 96.39%Jan 19, 2021
- High7.5PEAR Archive_Tar Improper Link Resolution VulnerabilityPatch nowKEVEPSS 70.59%Jan 18, 2021
- Medium4.4Samsung Mobile Devices Insertion of Sensitive Information Into Log File VulnerabilityPatch nowKEVEPSS 2.55%Jan 17, 2021
- Unknowngetlaminas laminas-http Deserialization of Untrusted DataPatch nowKEVEPSS 75.31%Jan 14, 2021
- UnknownTerraMaster TerraMaster OS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.48%Jan 14, 2021
- UnknownD-Link dwr-116_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.70%Jan 14, 2021
- Critical9.8Laravel Ignition File Upload VulnerabilityPatch nowKEVEPSS 99.94%Jan 12, 2021
- High7.8Microsoft Defender Remote Code Execution VulnerabilityPatch nowKEVEPSS 39.65%Jan 12, 2021
- High7.5Apache Flink Improper Access Control VulnerabilityPatch nowKEVEPSS 97.81%Jan 5, 2021
- UnknownMicrosoft IIS 5.0 System file listing Privilege EscalationPatch nowKEVEPSS 8.85%Jan 5, 2021
- Medium5.9The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.Check if you run itEPSS 3.56%Jan 4, 2021
- UnknownIn Account of Account.java, there is a possible boot loop due to improper input validation.Check if you run itEPSS 0.13%Jan 1, 2021
- Medium6.4Samsung Mobile Devices Race Condition VulnerabilityPatch nowKEVEPSS 0.37%Dec 31, 2020
- Medium6.4Samsung Mobile Devices Race Condition VulnerabilityPatch nowKEVEPSS 0.40%Dec 31, 2020
- Critical9.8SolarWinds Orion Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.98%Dec 29, 2020
- Medium6.1Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 32.92%Dec 28, 2020
- UnknownRed Hat cloudforms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 26.72%Dec 28, 2020
- Critical9.8Zyxel Multiple Products Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 90.16%Dec 22, 2020
- High8.8A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users…Check if you run itEPSS 3.11%Dec 22, 2020
- Medium4.3[REF] web_tour: prepare to change the default action in tour_compiler Currently, in tour_compiler, to check that an element is actually present in the DOM in a step, t…Check if you run itEPSS 0.70%Dec 22, 2020
- Medium4.3Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain…Check if you run itEPSS 1.49%Dec 22, 2020
- Medium6.5Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to ob…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to…Check if you run itEPSS 0.99%Dec 22, 2020
Sort