Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2CVE-2019-2444 is listed by Vulnerability in the Core RDBMS component of Oracle Database Server..Check if you run itEPSS 0.44%Jan 16, 2019
- High7.2CVE-2019-2406 is listed by Vulnerability in the Core RDBMS component of Oracle Database Server..Check if you run itEPSS 1.73%Jan 16, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.42%Jan 13, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.72%Jan 8, 2019
- High8.8Microsoft MSHTML Remote Code Execution VulnerabilityPatch nowKEVEPSS 53.20%Jan 8, 2019
- UnknownOracle Fusion Middleware WebLogic Server Unauthenticated Security BypassPatch nowKEVEPSS 50.22%Jan 8, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphi…Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorp…Check this weekEPSS 10.60%Jan 2, 2019
- Critical10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2…Check this weekEPSS 10.46%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes f…Check if you run itEPSS 7.52%Jan 2, 2019
- Unknownkguardsecurity kg-sha104_firmware Improper AuthenticationPatch nowKEVEPSS 4.66%Jan 1, 2019
- Medium4.7GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_Check if you run itEPSS 0.53%Dec 26, 2018
- High7.5Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt.Check if you run itEPSS 5.79%Dec 23, 2018
- Critical9.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.36%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 1.82%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.70%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 3.60%Dec 21, 2018
- UnknownSchneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4 Privilege EscalationPatch nowKEVEPSS 0.42%Dec 20, 2018
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 29.61%Dec 19, 2018
- High7.5Apache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Dec 13, 2018
- High7.8Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityPatch nowKEVEPSS 22.18%Dec 11, 2018
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.53%Dec 11, 2018
- High8.8Google Chromium V8 Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.64%Dec 11, 2018
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.33%Dec 10, 2018
Sort