Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Zyxel Multiple Products Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 90.16%Dec 22, 2020
- High8.8A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users…Check if you run itEPSS 3.11%Dec 22, 2020
- Medium4.3[REF] web_tour: prepare to change the default action in tour_compiler Currently, in tour_compiler, to check that an element is actually present in the DOM in a step, t…Check if you run itEPSS 0.70%Dec 22, 2020
- Medium4.3Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain…Check if you run itEPSS 1.49%Dec 22, 2020
- Medium6.5Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to ob…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to…Check if you run itEPSS 0.99%Dec 22, 2020
- Medium6.5Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to…Check if you run itEPSS 1.46%Dec 22, 2020
- High8.8[PERF] account, l10n_*: Improve batch send and print performances Problem --------- When doing the Send & Print on one invoice, or when multiple invoices are selected…Check if you run itEPSS 2.08%Dec 22, 2020
- Medium6.5Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrar…Check if you run itEPSS 0.88%Dec 22, 2020
- Medium5.4Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to…Check if you run itEPSS 0.71%Dec 22, 2020
- Medium5.4Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary we…Check if you run itEPSS 0.70%Dec 22, 2020
- Medium6.1Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to inject ar…Check if you run itEPSS 0.91%Dec 22, 2020
- Medium6.1Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to inject arbitr…Check if you run itEPSS 0.89%Dec 22, 2020
- Critical9.1Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an…Check if you run itEPSS 1.18%Dec 22, 2020
- Medium6.7Samsung Mobile Devices Improper Boundary Check VulnerabilityPatch nowKEVEPSS 0.80%Dec 22, 2020
- Medium6.7Samsung Mobile Devices Unspecified VulnerabilityPatch nowKEVEPSS 0.80%Dec 22, 2020
- Unknowncridio listingpro Missing AuthorizationPatch nowKEVEPSS 4.30%Dec 17, 2020
- High7.5Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability.Check if you run itEPSS 2.23%Dec 16, 2020
- Medium5.8Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability.Check if you run itEPSS 1.29%Dec 16, 2020
- High7.5An issue was discovered in p11-kit 0.23.6 through 0.23.21.Check if you run itEPSS 3.53%Dec 16, 2020
- Medium5.3An issue was discovered in p11-kit 0.21.1 through 0.23.21.Check if you run itEPSS 2.27%Dec 16, 2020
- High7.5An issue was discovered in p11-kit 0.21.1 through 0.23.21.Check if you run itEPSS 3.47%Dec 16, 2020
- High7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.Check if you run itEPSS 4.63%Dec 14, 2020
- High7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.Check if you run itEPSS 9.77%Dec 14, 2020
- Low3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make cu…Check if you run itEPSS 3.90%Dec 14, 2020
Sort