Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.Check if you run itEPSS 1.08%Jan 8, 2020
- Unknownwebfactoryltd minimal_coming_soon_\&_maintenance_mode Incorrect Default PermissionsPatch nowKEVEPSS 1.07%Jan 8, 2020
- UnknownASUS rt-ac66u_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%Jan 8, 2020
- UnknownNUUO nvrmini_2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 14.12%Jan 8, 2020
- UnknownCisco linksys_wrt110_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 25.13%Jan 8, 2020
- High8.8Mozilla Firefox And Thunderbird Type Confusion VulnerabilityPatch nowKEVEPSS 46.31%Jan 7, 2020
- High7.5ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-managemen…Check if you run itEPSS 3.42%Jan 3, 2020
- High7.5selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.Check if you run itEPSS 3.74%Jan 2, 2020
- Critical9.8D-Link DIR-859 Router Command Execution VulnerabilityPatch nowKEVEPSS 89.62%Dec 30, 2019
- High7.5Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.57%Dec 30, 2019
- High7.5TVT NVMS-1000 Directory Traversal VulnerabilityPatch nowKEVEPSS 96.07%Dec 29, 2019
- Critical9.8Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Dec 27, 2019
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.22%Dec 26, 2019
- High7.5zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.Check if you run itEPSS 6.81%Dec 24, 2019
- High7.5xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.Check if you run itEPSS 5.63%Dec 24, 2019
- Medium5.3SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c.Check this weekEPSS 10.75%Dec 24, 2019
- High7.5flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view.Check if you run itEPSS 6.81%Dec 24, 2019
- Critical9.9MongoDB mongo-express Remote Code Execution VulnerabilityPatch nowKEVEPSS 84.73%Dec 24, 2019
- UnknownrConfig rConfig Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 97.70%Dec 24, 2019
- UnknownMaccms wd Parameter Request VulnerabilityPatch nowKEVEPSS 44.09%Dec 24, 2019
- High7.5multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls.Check if you run itEPSS 8.02%Dec 23, 2019
- High7.5cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.Check if you run itEPSS 8.04%Dec 19, 2019
- High8.1[IMP] payment stripe: migrate to a direct payment flow The Reserve Bank of India (RBI) issued a directive (amended subsequently in December 2020 and March 2021) that i…Check if you run itEPSS 2.06%Dec 19, 2019
- Unknownwebfactoryltd 301_redirects Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.86%Dec 19, 2019
- Critical9.8A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.Check if you run itEPSS 2.74%Dec 18, 2019
Sort