Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to…Check if you run itEPSS 1.46%Dec 22, 2020
- High8.8[PERF] account, l10n_*: Improve batch send and print performances Problem --------- When doing the Send & Print on one invoice, or when multiple invoices are selected…Check if you run itEPSS 2.08%Dec 22, 2020
- Medium6.5Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrar…Check if you run itEPSS 0.88%Dec 22, 2020
- Medium5.4Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to…Check if you run itEPSS 0.71%Dec 22, 2020
- Medium5.4Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary we…Check if you run itEPSS 0.70%Dec 22, 2020
- Medium6.1Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to inject ar…Check if you run itEPSS 0.91%Dec 22, 2020
- Medium6.1Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to inject arbitr…Check if you run itEPSS 0.89%Dec 22, 2020
- Critical9.1Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an…Check if you run itEPSS 1.18%Dec 22, 2020
- Medium6.7Samsung Mobile Devices Improper Boundary Check VulnerabilityPatch nowKEVEPSS 0.80%Dec 22, 2020
- Medium6.7Samsung Mobile Devices Unspecified VulnerabilityPatch nowKEVEPSS 0.80%Dec 22, 2020
- Unknowncridio listingpro Missing AuthorizationPatch nowKEVEPSS 4.30%Dec 17, 2020
- High7.5Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability.Check if you run itEPSS 2.23%Dec 16, 2020
- Medium5.8Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability.Check if you run itEPSS 1.29%Dec 16, 2020
- High7.5An issue was discovered in p11-kit 0.23.6 through 0.23.21.Check if you run itEPSS 3.53%Dec 16, 2020
- Medium5.3An issue was discovered in p11-kit 0.21.1 through 0.23.21.Check if you run itEPSS 2.27%Dec 16, 2020
- High7.5An issue was discovered in p11-kit 0.21.1 through 0.23.21.Check if you run itEPSS 3.47%Dec 16, 2020
- High7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.Check if you run itEPSS 4.63%Dec 14, 2020
- High7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.Check if you run itEPSS 9.77%Dec 14, 2020
- Low3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make cu…Check if you run itEPSS 3.90%Dec 14, 2020
- High7.5Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.Check if you run itEPSS 5.34%Dec 14, 2020
- High7.8curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.Check if you run itEPSS 1.29%Dec 14, 2020
- High7.5curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).Check if you run itEPSS 3.93%Dec 14, 2020
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.64%Dec 14, 2020
- Unknowncutephp cutenews Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 52.55%Dec 14, 2020
Sort