Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownGNU Bourne-Again Shell (Bash) Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.33%Mar 1, 2018
- Medium5.9The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC…Check this weekEPSS 17.07%Feb 28, 2018
- Critical9.8FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for t…Check this weekEPSS 19.78%Feb 26, 2018
- Medium6.5Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied…Check this weekEPSS 14.47%Feb 23, 2018
- Unknownid3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory untCheck if you run itEPSS 2.46%Feb 20, 2018
- Critical9.8Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.Check this weekEPSS 22.98%Feb 19, 2018
- Critical9.8A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loadiCheck if you run itEPSS 2.98%Feb 19, 2018
- Medium6.5netfortris trixbox Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 39.28%Feb 16, 2018
- High8.8Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2…Check this weekEPSS 19.11%Feb 15, 2018
- UnknownDasan h640x_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 5.04%Feb 12, 2018
- Critical9.8Exim Buffer Overflow VulnerabilityPatch nowKEVEPSS 82.14%Feb 8, 2018
- Critical9.8Cisco VPN Routers Remote Code Execution VulnerabilityPatch nowKEVEPSS 55.19%Feb 8, 2018
- UnknownApp password scope can be changed for other usersCheck if you run itEPSS 0.75%Feb 7, 2018
- Unknownideamk eps_viewer Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 5.14%Feb 4, 2018
- High7.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 89.53%Feb 3, 2018
- Unknownorientdb orientdb Improper Privilege ManagementPatch nowKEVEPSS 73.07%Feb 1, 2018
- Critical9.8Kaseya VSA Remote Code Execution VulnerabilityPatch nowKEVEPSS 29.55%Jan 30, 2018
- Critical9.8Jenkins Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.68%Jan 29, 2018
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Double FreePatch nowKEVEPSS 86.78%Jan 29, 2018
- UnknownD-Link DIR-645 Router Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 5.21%Jan 23, 2018
- Critical9.8AsusWRT 'handle_request' Function Authentication BypassPatch nowKEVEPSS 87.53%Jan 22, 2018
- Unknownclaymore_dual_miner_project claymore_dual_miner Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.89%Jan 17, 2018
- UnknownLinux Kernel ping_unhash Function Privilege EscalationPatch nowKEVEPSS 2.47%Jan 16, 2018
- UnknownLinux Kernel MSM_CAM_IOCTL_SET_MEM_MAP_INFO Privilege EscalationPatch nowKEVEPSS 0.89%Jan 16, 2018
- UnknownPHP PHP Improper Input ValidationPatch nowKEVEPSS 50.34%Jan 15, 2018
Sort