Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2019-15615 is listed by Bypass lock protection in Android app.Check if you run itEPSS 0.37%Dec 5, 2019
- UnknownWorkflow rules only check the file extension for the mimetype instead of the contentCheck if you run itEPSS 1.13%Dec 4, 2019
- Medium4.7shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesCheck if you run itEPSS 0.31%Dec 3, 2019
- Critical9.8freeswitch freeswitch Use of Hard-coded CredentialsPatch nowKEVEPSS 29.45%Dec 2, 2019
- High7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.Check if you run itEPSS 2.61%Nov 28, 2019
- Medium5.9SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.Check if you run itEPSS 2.71%Nov 27, 2019
- UnknownYaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed.Check this weekEPSS 16.14%Nov 26, 2019
- UnknownYubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM conCheck if you run itEPSS 2.02%Nov 26, 2019
- High7.5sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.Check if you run itEPSS 3.59%Nov 25, 2019
- High8.8Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 5.49%Nov 25, 2019
- Critical9.8Sangoma FreePBX Improper Authentication VulnerabilityPatch nowKEVEPSS 55.95%Nov 21, 2019
- Medium6.5Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 6.64%Nov 21, 2019
- UnknownMissing sanitization in iOS App allows XSSCheck if you run itEPSS 0.78%Nov 20, 2019
- Low3.3On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after…Check if you run itEPSS 0.41%Nov 19, 2019
- Unknownnginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)Check if you run itEPSS 3.99%Nov 19, 2019
- Unknownicegram email_subscribers_\&_newsletters Missing AuthorizationPatch nowKEVEPSS 71.40%Nov 13, 2019
- UnknownPacemaker before 1.1.6 configure script creates temporary files insecurelyCheck if you run itEPSS 0.49%Nov 12, 2019
- High7.8Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 30.17%Nov 12, 2019
- High7.8Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.59%Nov 12, 2019
- High7.8Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.60%Nov 12, 2019
- UnknownLogin and token disclosure to other Nextcloud servicesCheck if you run itEPSS 1.08%Nov 12, 2019
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 77.29%Nov 12, 2019
- Unknownclamav 0.91.2 suffers from a floating point exception when using ScanOLE2.Check if you run itEPSS 2.23%Nov 7, 2019
- Unknownsimplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.Check if you run itEPSS 0.74%Nov 6, 2019
- UnknownThere is a possible heap overflow in libclamav/fsg.c before 0.100.0.Check if you run itEPSS 1.53%Nov 6, 2019
Sort