Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file.Check if you run itEPSS 3.07%Jul 15, 2019
- Critical9.8GNU Libc current is affected by: Mitigation bypass.Check if you run itEPSS 3.25%Jul 15, 2019
- Medium4.2A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially…Check if you run itEPSS 2.24%Jul 12, 2019
- Medium5.3getflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 62.57%Jul 10, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 9.87%Jul 9, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 2.31%Jul 9, 2019
- High7.5The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under c…Check if you run itEPSS 2.21%Jul 5, 2019
- UnknownServer-Side request forgery in New-Subscription feature of the calendar appCheck if you run itEPSS 1.29%Jul 4, 2019
- Critical9.1Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to esca…Check if you run itEPSS 2.17%Jul 3, 2019
- High8.1Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset th…Check if you run itEPSS 0.95%Jul 3, 2019
- Medium6.5Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkh…Check if you run itEPSS 1.50%Jul 3, 2019
- Medium6.5Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated u…Check if you run itEPSS 1.16%Jul 3, 2019
- High8.1Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.Check if you run itEPSS 0.95%Jul 3, 2019
- Medium6.5Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to d…Check if you run itEPSS 0.79%Jul 3, 2019
- Medium6.5Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed…Check if you run itEPSS 0.95%Jul 3, 2019
- Medium4.3Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to acce…Check if you run itEPSS 0.77%Jul 3, 2019
- High7.5DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityPatch nowKEVEPSS 74.05%Jul 3, 2019
- High7.5DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityPatch nowKEVEPSS 76.30%Jul 3, 2019
- High7.8A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run th…Check if you run itEPSS 0.69%Jul 2, 2019
- Critical9.8Nice Linear eMerge E3-Series OS Command Injection VulnerabilityPatch nowKEVEPSS 97.08%Jul 2, 2019
- Medium6.5Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to…Check if you run itEPSS 1.81%Jun 28, 2019
- Medium4.9The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privi…Check if you run itEPSS 1.23%Jun 28, 2019
- Critical9.8Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a data…Check if you run itEPSS 2.22%Jun 28, 2019
- Medium6.5Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other use…Check if you run itEPSS 0.59%Jun 28, 2019
- Medium5.3Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on beh…Check if you run itEPSS 1.40%Jun 28, 2019
Sort