Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownAdobe Acrobat and Reader Out-of-bounds ReadPatch nowKEVEPSS 10.79%Jun 3, 2020
- Unknownmtheme-unus_project mtheme-unus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 55.01%Jun 3, 2020
- Unknownwpshopstyling wp_e-commerce_shop_styling Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 24.09%Jun 3, 2020
- High7.5VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityPatch nowKEVEPSS 95.59%Jun 2, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…Check if you run itEPSS 2.23%Jun 1, 2020
- High7.2Pi-Hole AdminLTE Remote Code Execution VulnerabilityPatch nowKEVEPSS 78.34%May 29, 2020
- Medium5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.Check if you run itEPSS 0.60%May 27, 2020
- Medium5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.Check if you run itEPSS 0.66%May 27, 2020
- High7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.Check if you run itEPSS 1.02%May 27, 2020
- Medium5.5SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.Check if you run itEPSS 0.64%May 24, 2020
- Medium5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.Check if you run itEPSS 1.00%May 24, 2020
- High8.8Apache Kylin OS Command Injection VulnerabilityPatch nowKEVEPSS 97.39%May 22, 2020
- High7.0Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 53.88%May 21, 2020
- High7.0When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents an…Check this weekEPSS 55.52%May 20, 2020
- Unknownmagmi_project magmi Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.28%May 18, 2020
- Unknownelementor elementor_page_builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.57%May 17, 2020
- UnknownUltimate Addons for Elementor plugin before 1.24.2 for WordPress Unauthenticated Subscriber User BypassPatch nowKEVEPSS 2.31%May 17, 2020
- UnknownImproper access control allows injecting tasks into other users decksCheck if you run itEPSS 0.64%May 15, 2020
- UnknownXootiX login\/signup_popup Missing AuthorizationPatch nowKEVEPSS 0.70%May 14, 2020
- Medium4.4iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.Check if you run itEPSS 0.40%May 9, 2020
- High7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.Check if you run itEPSS 1.90%May 9, 2020
- High7.2Plex Media Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 72.75%May 8, 2020
- Medium4.3IBM Data Risk Manager Directory Traversal VulnerabilityPatch nowKEVEPSS 68.54%May 7, 2020
- Critical9.1IBM Data Risk Manager Remote Code Execution VulnerabilityPatch nowKEVEPSS 61.69%May 7, 2020
- Critical9.8IBM Data Risk Manager Security Bypass VulnerabilityPatch nowKEVEPSS 70.03%May 7, 2020
Sort