Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program".Check if you run itEPSS 0.63%Nov 4, 2019
- Medium5.5Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.Check if you run itEPSS 0.35%Nov 1, 2019
- Unknowngpw generates shorter passwords than requiredCheck if you run itEPSS 1.50%Oct 29, 2019
- High8.8Google Chrome WebAudio Use-After-Free VulnerabilityPatch nowKEVEPSS 49.42%Oct 29, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.75%Oct 28, 2019
- High7.5Trend Micro OfficeScan Directory Traversal VulnerabilityPatch nowKEVEPSS 25.12%Oct 28, 2019
- UnknownDuplicate setup of second factor allowedCheck if you run itEPSS 0.61%Oct 25, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0.Check if you run itEPSS 3.51%Oct 23, 2019
- High7.5GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels.Check if you run itEPSS 3.23%Oct 22, 2019
- UnknownFile-drop content is visible through the gallery appCheck if you run itEPSS 0.92%Oct 22, 2019
- High8.1In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…Check if you run itEPSS 3.81%Oct 21, 2019
- Critical9.8idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.Check if you run itEPSS 3.71%Oct 21, 2019
- High8.8Oracle Solaris Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.40%Oct 16, 2019
- Unknowncybelsoft thinvnc Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.76%Oct 16, 2019
- Medium5.4There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 2.22%Oct 14, 2019
- Medium5.3There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 0.55%Oct 14, 2019
- Critical9.8Nostromo nhttpd Directory Traversal VulnerabilityPatch nowKEVEPSS 99.03%Oct 14, 2019
- High8.1LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input.Check this weekEPSS 10.45%Oct 14, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.84%Oct 10, 2019
- High7.8Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.48%Oct 10, 2019
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…Check if you run itEPSS 2.23%Oct 9, 2019
- UnknownRemoving emails from circles does not revoke access to shared itemsCheck if you run itEPSS 0.83%Oct 6, 2019
- Medium5.3sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.Check if you run itEPSS 2.83%Oct 3, 2019
- UnknownJustSystems Remote Code ExecutionPatch nowKEVEPSS 3.50%Oct 2, 2019
- UnknownApple safari Improper Restriction of Rendered UI Layers or FramesPatch nowKEVEPSS 1.03%Sep 30, 2019
Sort