Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.Check if you run itEPSS 7.78%Apr 9, 2019
- Medium6.1Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitr…Check if you run itEPSS 1.00%Apr 9, 2019
- Medium6.5Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail the…Check if you run itEPSS 1.37%Apr 9, 2019
- UnknownVMware Horizon Connection Server Internal Domain Information DisclosurePatch nowKEVEPSS 1.23%Apr 9, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 45.23%Apr 9, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- High7.2Reolink Multiple IP Cameras OS Command Injection VulnerabilityPatch nowKEVEPSS 37.54%Apr 8, 2019
- Unknownphpcms phpcms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 20.77%Apr 4, 2019
- High7.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 2.37%Apr 3, 2019
- Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 17.87%Apr 2, 2019
- Unknown2FA sessions not properly expired on password changeCheck if you run itEPSS 0.32%Apr 1, 2019
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 8.26%Apr 1, 2019
- UnknownMicrosoft Internet Explorer Out-of-bounds WritePatch nowKEVEPSS 31.26%Apr 1, 2019
- UnknownMicrosoft Internet Explorer Out-of-bounds WritePatch nowKEVEPSS 20.40%Apr 1, 2019
- UnknownWindows SMB Remote Code ExecutionPatch nowKEVEPSS 13.04%Apr 1, 2019
- UnknownWindows SMB Remote Code ExecutionPatch nowKEVEPSS 17.39%Apr 1, 2019
- High7.5Rails Ruby on Rails Path Traversal VulnerabilityPatch nowKEVEPSS 98.51%Mar 27, 2019
- Critical9.8Kentico Xperience Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 95.07%Mar 26, 2019
- UnknownReflected XSS in redirect of the UpdaterCheck if you run itEPSS 0.73%Mar 26, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed.Check if you run itEPSS 5.12%Mar 25, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed.Check if you run itEPSS 5.42%Mar 25, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit sign…Check if you run itEPSS 6.13%Mar 25, 2019
- High8.8An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.Check if you run itEPSS 6.13%Mar 25, 2019
- High8.8A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side.Check if you run itEPSS 3.44%Mar 25, 2019
- Critical10.0Kibana Arbitrary Code ExecutionPatch nowKEVEPSS 95.34%Mar 25, 2019
Sort