Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 0.55%Oct 14, 2019
- Critical9.8Nostromo nhttpd Directory Traversal VulnerabilityPatch nowKEVEPSS 99.03%Oct 14, 2019
- High8.1LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input.Check if you run itEPSS 9.12%Oct 14, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.20%Oct 10, 2019
- High7.8Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.48%Oct 10, 2019
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…Check if you run itEPSS 2.23%Oct 9, 2019
- UnknownRemoving emails from circles does not revoke access to shared itemsCheck if you run itEPSS 0.83%Oct 6, 2019
- Medium5.3sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.Check if you run itEPSS 2.83%Oct 3, 2019
- UnknownJustSystems Remote Code ExecutionPatch nowKEVEPSS 3.50%Oct 2, 2019
- UnknownApple safari Improper Restriction of Rendered UI Layers or FramesPatch nowKEVEPSS 1.03%Sep 30, 2019
- UnknownNETGEAR srx5308_firmware Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.13%Sep 30, 2019
- Critical9.8Exim Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 41.64%Sep 27, 2019
- Critical9.8D-Link Multiple Routers Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Sep 27, 2019
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 72.10%Sep 26, 2019
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.Check if you run itEPSS 0.55%Sep 25, 2019
- High7.5An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.Check if you run itEPSS 1.10%Sep 24, 2019
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Sep 24, 2019
- Medium6.5Google Chromium V8 Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 55.93%Sep 24, 2019
- UnknownRich Review plugin for WordPress POST Body Update Parameter VulnerabilityPatch nowKEVEPSS 0.55%Sep 24, 2019
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 52.45%Sep 23, 2019
- Medium6.5RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation.Check if you run itEPSS 3.89%Sep 18, 2019
- Medium6.5RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation.Check if you run itEPSS 2.63%Sep 18, 2019
- Medium6.5RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability.Check if you run itEPSS 1.68%Sep 18, 2019
- Critical9.8Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.Check this weekEPSS 17.94%Sep 16, 2019
- Critical9.8Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.Check if you run itEPSS 7.46%Sep 16, 2019
Sort