Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Fortinet FortiOS SSL VPN Improper Authentication VulnerabilityPatch nowKEVEPSS 45.38%Jul 24, 2020
- High7.4scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.Check this weekEPSS 13.68%Jul 24, 2020
- High7.5Cisco ASA and FTD Read-Only Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Jul 22, 2020
- High7.8Qualcomm Multiple Chipsets Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.60%Jul 20, 2020
- UnknownOpenBSD openssh Incorrect AuthorizationPatch nowKEVEPSS 3.68%Jul 19, 2020
- Critical9.8In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations.Check if you run itEPSS 3.63%Jul 17, 2020
- High8.8Apache Airflow Command InjectionPatch nowKEVEPSS 99.19%Jul 16, 2020
- UnknownRe-Sharing allows increase of privilegesCheck if you run itEPSS 1.47%Jul 16, 2020
- UnknownTOTOLINK A7000R '/cgi-bin/ExportSettings.sh' VulnerabilityPatch nowKEVEPSS 0.96%Jul 16, 2020
- Medium4.1CVE-2020-2978 is listed by Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server..Check if you run itEPSS 1.24%Jul 15, 2020
- UnknownAccess control missing while viewing the attachments in the 'All boards'Check if you run itEPSS 0.78%Jul 15, 2020
- Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 94.55%Jul 15, 2020
- Critical10.0Microsoft Windows DNS Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.72%Jul 14, 2020
- High7.8Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution VulnerabilityPatch nowKEVEPSS 93.97%Jul 14, 2020
- Critical9.0Microsoft Hyper-V RemoteFX vGPU Remote Code Execution VulnerabilityPatch nowKEVEPSS 7.39%Jul 14, 2020
- Medium5.3SAP netweaver_application_server_java Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 28.31%Jul 14, 2020
- Critical10.0SAP NetWeaver Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 94.72%Jul 14, 2020
- High7.5ALAS-2025-1972 (medium): python26Check if you run itEPSS 2.99%Jul 13, 2020
- Critical9.8Tenda AC1900 Router AC15 Model Remote Code Execution VulnerabilityPatch nowKEVEPSS 79.81%Jul 13, 2020
- UnknownMissing memory corruption protection on Windows release builtCheck if you run itEPSS 0.35%Jul 10, 2020
- UnknownMemory Leak in OCUtil.dll library in Desktop client can lead to DoSCheck if you run itEPSS 0.47%Jul 10, 2020
- UnknownLinux client is vulnerable to directory traversal when downloading filesCheck this weekEPSS 25.77%Jul 10, 2020
- UnknownClear text storage of proxy parameters and passwordsCheck if you run itEPSS 0.91%Jul 10, 2020
- UnknownArbitrary code execution in desktop client via OpenSSL configCheck if you run itEPSS 0.66%Jul 10, 2020
- UnknownXSS in desktop client via invalid server address on login formCheck if you run itEPSS 1.40%Jul 10, 2020
Sort