Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownasustor asustor_data_master Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.13%Dec 14, 2020
- Unknownegroupware egroupware Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 8.50%Dec 14, 2020
- Unknownwp-ecommerce easy_wp_smtp Insertion of Sensitive Information into Log FilePatch nowKEVEPSS 60.38%Dec 13, 2020
- Critical9.8CyberoamOS (CROS) SQL Injection VulnerabilityPatch nowKEVEPSS 4.70%Dec 11, 2020
- Critical9.8Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 95.93%Dec 10, 2020
- Medium4.4Samsung Mobile Devices Memory Corruption VulnerabilityPatch nowKEVEPSS 0.89%Dec 10, 2020
- Medium5.5Samsung Mobile Devices Improper Access Control VulnerabilityPatch nowKEVEPSS 1.08%Dec 10, 2020
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 78.38%Dec 10, 2020
- High8.4Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 36.51%Dec 9, 2020
- High7.5A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs.Check if you run itEPSS 3.15%Dec 8, 2020
- High7.5sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family…Check if you run itEPSS 2.72%Dec 6, 2020
- Unknowngvectors wpdiscuz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 12.61%Dec 6, 2020
- Medium4.8The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the co…Check if you run itEPSS 1.68%Dec 4, 2020
- UnknownIn addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value.Check if you run itEPSS 0.55%Dec 1, 2020
- Unknownwificam wireless_ip_camera_\(p2p\)_firmware Use of Hard-coded CredentialsPatch nowKEVEPSS 8.82%Dec 1, 2020
- Unknownwificam wireless_ip_camera_\(p2p\)_firmware Improper AuthenticationPatch nowKEVEPSS 4.30%Dec 1, 2020
- Unknownwificam wireless_ip_camera_\(p2p\)_firmware Insufficiently Protected CredentialsPatch nowKEVEPSS 4.34%Dec 1, 2020
- Unknownwificam wireless_ip_camera_\(p2p\)_firmware Missing Encryption of Sensitive DataPatch nowKEVEPSS 2.69%Dec 1, 2020
- Unknownbeckhoff ipc_diagnostics Improper Access ControlPatch nowKEVEPSS 5.74%Dec 1, 2020
- Unknownavinu phpMyAdmin Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 60.99%Dec 1, 2020
- Unknownrocketsoftware rocket_servergraph Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 72.61%Dec 1, 2020
- UnknownTVT dvr Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.22%Dec 1, 2020
- Unknownmicasaverde veralite_firmware Improper AuthenticationPatch nowKEVEPSS 12.18%Dec 1, 2020
- UnknownSangoma FreePBX Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.25%Dec 1, 2020
- Unknownop5 monitor Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 72.85%Dec 1, 2020
Sort