Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Tenda AC7, AC9, and AC10 Routers Command Injection VulnerabilityPatch nowKEVEPSS 8.51%Oct 30, 2018
- Medium5.5An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.Check if you run itEPSS 1.69%Oct 29, 2018
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.20%Oct 29, 2018
- UnknownSonicWall global_management_system Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 4.50%Oct 27, 2018
- UnknownImproper access control checks for single share previewsCheck if you run itEPSS 1.07%Oct 25, 2018
- UnknownImproper validation of permissionsCheck if you run itEPSS 0.96%Oct 25, 2018
- UnknownSecond factor authentication bypassed if provider fails to loadCheck if you run itEPSS 0.81%Oct 25, 2018
- UnknownImproper authentication on public sharesCheck if you run itEPSS 0.89%Oct 25, 2018
- UnknownSession fixation on public share pageCheck if you run itEPSS 0.55%Oct 25, 2018
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.02%Oct 17, 2018
- Critical9.8comsenz duomicms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.26%Oct 9, 2018
- Medium4.3When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.Check this weekEPSS 97.68%Oct 4, 2018
- Medium5.5Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a ..Check if you run itEPSS 1.54%Oct 1, 2018
- Unknownmodx modx_revolution Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 64.09%Sep 26, 2018
- High7.8Linux Kernel Integer Overflow VulnerabilityPatch nowKEVEPSS 14.69%Sep 25, 2018
- Critical9.8Adobe ColdFusion Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.95%Sep 25, 2018
- Critical9.3vestacp control_panel Embedded Malicious CodePatch nowKEVEPSS 0.44%Sep 25, 2018
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.53%Sep 5, 2018
- Medium6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and otherCheck if you run itEPSS 2.54%Aug 28, 2018
- High8.1Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.99%Aug 22, 2018
- High7.5In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names , , and ), can be abused to write ou…Check if you run itEPSS 7.88%Aug 21, 2018
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 70.04%Aug 17, 2018
- Medium6.5libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrateCheck if you run itEPSS 4.29%Aug 16, 2018
- High7.8Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.44%Aug 15, 2018
- High7.8Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.44%Aug 15, 2018
Sort