Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
- UnknownUltimate Member ultimate_member Improper Privilege ManagementPatch nowKEVEPSS 8.46%Nov 9, 2020
- High8.8Google Chromium V8 Incorrect Implementation VulnerabililtyPatch nowKEVEPSS 2.76%Nov 9, 2020
- Critical9.6Google Chrome Use-After-Free VulnerabilityPatch nowKEVEPSS 2.73%Nov 7, 2020
- High7.5MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encod…Check if you run itEPSS 4.42%Nov 6, 2020
- Critical9.8SaltStack Salt Shell Injection VulnerabilityPatch nowKEVEPSS 99.59%Nov 6, 2020
- Unknownszuray iptv\/h.264_video_encoder_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 40.30%Nov 6, 2020
- UnknownD-Link dir-816l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 20.86%Nov 6, 2020
- Unknownt-mobile tm-ac1900 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.45%Nov 6, 2020
- High7.1Samsung Mobile Devices Improper Access Control VulnerabilityPatch nowKEVEPSS 2.81%Nov 3, 2020
- Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.25%Nov 2, 2020
- UnknownIn generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check.Check if you run itEPSS 0.23%Nov 1, 2020
- Critical9.6Google Chrome for Android UI Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 6.36%Oct 31, 2020
- UnknownWordPress wordpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.72%Oct 29, 2020
- Medium5.5Apple Multiple Products Memory Initialization VulnerabilityPatch nowKEVEPSS 16.52%Oct 29, 2020
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 48.29%Oct 29, 2020
- Medium6.1QNAP NAS File Station Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 30.53%Oct 28, 2020
- Medium5.4QNAP NAS File Station Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 22.68%Oct 28, 2020
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityPatch nowKEVEPSS 96.48%Oct 28, 2020
- High7.8Apple Multiple Products Type Confusion VulnerabilityPatch nowKEVEPSS 10.34%Oct 26, 2020
- High7.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 22.01%Oct 26, 2020
- High7.1macOS APFS Snapshot Mount Authorization BypassPatch nowKEVEPSS 0.37%Oct 22, 2020
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.74%Oct 22, 2020
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.43%Oct 22, 2020
- Medium4.9CVE-2020-14901 is listed by Vulnerability in the RDBMS Security component of Oracle Database Server..Check if you run itEPSS 1.48%Oct 21, 2020
Sort