Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDenial of Service by requesting to reset a passwordCheck if you run itEPSS 1.83%Oct 3, 2020
- UnknownImproper integrity protection of server-side encryption keysCheck if you run itEPSS 0.74%Oct 3, 2020
- UnknownImproper confidentiality protection of server-side encryption keysCheck if you run itEPSS 0.32%Oct 3, 2020
- UnknownExternal storage app saves password for all users in the databaseCheck if you run itEPSS 0.51%Oct 3, 2020
- UnknownGNU grub2 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 1.71%Oct 1, 2020
- UnknownIn ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data.Check if you run itEPSS 0.88%Oct 1, 2020
- UnknownIn SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting.Check if you run itEPSS 0.15%Oct 1, 2020
- UnknownCortana Elevation of PrivilegePatch nowKEVEPSS 1.74%Oct 1, 2020
- Unknownx.org x_server Incorrect AuthorizationPatch nowKEVEPSS 27.24%Oct 1, 2020
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityPatch nowKEVEPSS 90.76%Sep 30, 2020
- High7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP reques…Check if you run itEPSS 6.36%Sep 27, 2020
- Critical9.8Sophos SG UTM Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.75%Sep 24, 2020
- Unknowngeotools geotools Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.09%Sep 22, 2020
- UnknownOSGeo GeoServer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 85.25%Sep 22, 2020
- Unknownsepal spboard Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.89%Sep 20, 2020
- UnknownMicrosoft Internet Explorer Out-of-bounds WritePatch nowKEVEPSS 16.29%Sep 15, 2020
- UnknownApache Struts Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 96.95%Sep 14, 2020
- Medium4.2Microsoft Edge and Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 2.70%Sep 11, 2020
- Critical9.8WordPress File Manager Plugin Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.33%Sep 9, 2020
- High7.5An issue was discovered in GnuTLS before 3.6.15.Check if you run itEPSS 3.83%Sep 4, 2020
- Medium6.5GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c.Check if you run itEPSS 2.98%Sep 4, 2020
- Critical10.0Oracle Solaris and Zettabyte File System (ZFS) Unspecified VulnerabilityPatch nowKEVEPSS 80.16%Sep 4, 2020
- High8.8D-Link DCS-2530L and DCS-2670L Command Injection VulnerabilityPatch nowKEVEPSS 54.01%Sep 2, 2020
- High7.5D-Link DCS-2530L and DCS-2670L Devices Unspecified VulnerabilityPatch nowKEVEPSS 97.51%Sep 2, 2020
- High7.5By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression.Check this weekEPSS 49.18%Sep 1, 2020
Sort