Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownicegram email_subscribers_\&_newsletters Missing AuthorizationPatch nowKEVEPSS 71.40%Nov 13, 2019
- UnknownPacemaker before 1.1.6 configure script creates temporary files insecurelyCheck if you run itEPSS 0.49%Nov 12, 2019
- High7.8Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 30.17%Nov 12, 2019
- High7.8Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.59%Nov 12, 2019
- High7.8Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.60%Nov 12, 2019
- UnknownLogin and token disclosure to other Nextcloud servicesCheck if you run itEPSS 1.08%Nov 12, 2019
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 77.29%Nov 12, 2019
- Unknownclamav 0.91.2 suffers from a floating point exception when using ScanOLE2.Check if you run itEPSS 2.23%Nov 7, 2019
- Unknownsimplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.Check if you run itEPSS 0.74%Nov 6, 2019
- UnknownThere is a possible heap overflow in libclamav/fsg.c before 0.100.0.Check if you run itEPSS 1.53%Nov 6, 2019
- High7.8There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program".Check if you run itEPSS 0.63%Nov 4, 2019
- Medium5.5Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.Check if you run itEPSS 0.35%Nov 1, 2019
- Unknowngpw generates shorter passwords than requiredCheck if you run itEPSS 1.50%Oct 29, 2019
- High8.8Google Chrome WebAudio Use-After-Free VulnerabilityPatch nowKEVEPSS 49.42%Oct 29, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.75%Oct 28, 2019
- High7.5Trend Micro OfficeScan Directory Traversal VulnerabilityPatch nowKEVEPSS 25.12%Oct 28, 2019
- UnknownDuplicate setup of second factor allowedCheck if you run itEPSS 0.61%Oct 25, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0.Check if you run itEPSS 3.51%Oct 23, 2019
- High7.5GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels.Check if you run itEPSS 3.23%Oct 22, 2019
- UnknownFile-drop content is visible through the gallery appCheck if you run itEPSS 0.92%Oct 22, 2019
- High8.1In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…Check if you run itEPSS 3.81%Oct 21, 2019
- Critical9.8idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.Check if you run itEPSS 3.71%Oct 21, 2019
- High8.8Oracle Solaris Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.40%Oct 16, 2019
- Unknowncybelsoft thinvnc Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.76%Oct 16, 2019
- Medium5.4There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 2.22%Oct 14, 2019
Sort