Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityPatch nowKEVEPSS 100.00%May 1, 2019
- Critical9.8Crestron Multiple Products Command Injection VulnerabilityPatch nowKEVEPSS 98.95%Apr 30, 2019
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 81.04%Apr 30, 2019
- Critical9.8Oracle WebLogic Server, InjectionPatch nowKEVEPSS 99.98%Apr 26, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 98.54%Apr 25, 2019
- High8.2Vulnerability in the Portable Clusterware component of Oracle Database Server.Check if you run itEPSS 0.42%Apr 23, 2019
- High7.2Oracle BI Publisher Unauthorized Access VulnerabilityPatch nowKEVEPSS 92.18%Apr 23, 2019
- High8.8Atlassian Confluence Server and Data Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.03%Apr 18, 2019
- UnknownImproper access control checks for share expiration dateCheck if you run itEPSS 0.68%Apr 12, 2019
- UnknownImproper share updates could result in extended data accessCheck if you run itEPSS 1.04%Apr 12, 2019
- UnknownClassification of calendar events is ignored by the activity streamCheck if you run itEPSS 0.85%Apr 12, 2019
- UnknownGoogle Android Incorrect Calculation of Buffer SizePatch nowKEVEPSS 0.10%Apr 12, 2019
- UnknownGoogle Android Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 20.49%Apr 12, 2019
- Unknownyellowpencil visual_css_style_editor Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.89%Apr 11, 2019
- Critical9.8The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zerCheck if you run itEPSS 2.09%Apr 10, 2019
- High7.8Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 41.40%Apr 9, 2019
- High7.5Microsoft Internet Explorer Type Confusion VulnerabilityPatch nowKEVEPSS 81.68%Apr 9, 2019
- High8.8Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.Check if you run itEPSS 7.78%Apr 9, 2019
- Medium6.1Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitr…Check if you run itEPSS 1.00%Apr 9, 2019
- Medium6.5Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail the…Check if you run itEPSS 1.37%Apr 9, 2019
- UnknownVMware Horizon Connection Server Internal Domain Information DisclosurePatch nowKEVEPSS 1.23%Apr 9, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 45.23%Apr 9, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- High7.2Reolink Multiple IP Cameras OS Command Injection VulnerabilityPatch nowKEVEPSS 37.54%Apr 8, 2019
- Unknownphpcms phpcms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 20.77%Apr 4, 2019
Sort