Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.74%Dec 11, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 74.44%Dec 10, 2019
- Critical9.8pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.Check if you run itEPSS 7.40%Dec 9, 2019
- High7.5SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.Check this weekEPSS 10.98%Dec 9, 2019
- Medium5.5alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.Check if you run itEPSS 0.57%Dec 9, 2019
- Critical9.8VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.13%Dec 6, 2019
- Critical9.8lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or…Check if you run itEPSS 4.67%Dec 5, 2019
- Critical9.8QNAP Photo Station Path Traversal VulnerabilityPatch nowKEVEPSS 89.68%Dec 5, 2019
- Critical9.8QNAP Photo Station Path Traversal VulnerabilityPatch nowKEVEPSS 82.71%Dec 5, 2019
- Critical9.8QNAP QTS Improper Input Validation VulnerabilityPatch nowKEVEPSS 14.37%Dec 5, 2019
- Critical9.8QNAP Photo Station Improper Access Control VulnerabilityPatch nowKEVEPSS 88.10%Dec 5, 2019
- UnknownCVE-2019-15615 is listed by Bypass lock protection in Android app.Check if you run itEPSS 0.37%Dec 5, 2019
- UnknownWorkflow rules only check the file extension for the mimetype instead of the contentCheck if you run itEPSS 1.13%Dec 4, 2019
- Medium4.7shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesCheck if you run itEPSS 0.31%Dec 3, 2019
- High7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.Check if you run itEPSS 2.61%Nov 28, 2019
- Medium5.9SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.Check if you run itEPSS 2.71%Nov 27, 2019
- UnknownYaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed.Check this weekEPSS 16.14%Nov 26, 2019
- UnknownYubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM conCheck if you run itEPSS 2.02%Nov 26, 2019
- High7.5sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.Check if you run itEPSS 3.56%Nov 25, 2019
- High8.8Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 5.49%Nov 25, 2019
- Critical9.8Sangoma FreePBX Improper Authentication VulnerabilityPatch nowKEVEPSS 55.95%Nov 21, 2019
- Medium6.5Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 6.64%Nov 21, 2019
- UnknownMissing sanitization in iOS App allows XSSCheck if you run itEPSS 0.78%Nov 20, 2019
- Low3.3On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after…Check if you run itEPSS 0.41%Nov 19, 2019
- Unknownnginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)Check if you run itEPSS 3.99%Nov 19, 2019
Sort