Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for…Check if you run itEPSS 1.02%Jun 27, 2020
- UnknownLaravel Framework 5.7.x Illuminate Deserialization VulnerabilityPatch nowKEVJun 24, 2020
- UnknownMicrosoft Windows Improper Resource Shutdown or ReleasePatch nowKEVEPSS 1.12%Jun 24, 2020
- Medium5.9Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a…Check this weekEPSS 12.71%Jun 18, 2020
- Medium5.4Treck TCP/IP stack Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 18.42%Jun 17, 2020
- UnknownPossible denial of service when entering a long passwordCheck if you run itEPSS 1.32%Jun 16, 2020
- Critical9.8trendnet tew-827dru_firmware Out-of-bounds WritePatch nowKEVEPSS 2.35%Jun 15, 2020
- High8.8pandorafms pandora_fms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 90.99%Jun 11, 2020
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 16.41%Jun 9, 2020
- Medium6.1Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 76.60%Jun 8, 2020
- UnknownIvanti Connect Secure and Policy Secure Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.80%Jun 8, 2020
- High7.5SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.Check if you run itEPSS 4.45%Jun 6, 2020
- High7.5regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.Check if you run itEPSS 5.97%Jun 5, 2020
- High8.6Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.Check if you run itEPSS 4.88%Jun 5, 2020
- High8.2Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.Check this weekEPSS 11.33%Jun 5, 2020
- High7.8Apple Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 0.83%Jun 5, 2020
- Critical9.8QNAP NAS File Station Command Injection VulnerabilityPatch nowKEVEPSS 30.16%Jun 5, 2020
- UnknownPassword of share by mail is not hashed when given on the create share callCheck if you run itEPSS 1.91%Jun 4, 2020
- UnknownIncrease random used for encryptionCheck if you run itEPSS 0.37%Jun 4, 2020
- High7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).Check this weekEPSS 22.28%Jun 4, 2020
- Critical9.8rConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 32.12%Jun 4, 2020
- UnknownNew users can read all Nextcloud Deck data from previous user with same usernameCheck if you run itEPSS 1.34%Jun 3, 2020
- Medium6.7systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges whe…Check if you run itEPSS 0.46%Jun 3, 2020
- Unknownbrizy brizy Improper AuthorizationPatch nowKEVEPSS 0.52%Jun 3, 2020
- Unknowngracemedia_media_player_project gracemedia_media_player Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 43.80%Jun 3, 2020
Sort