Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 2.37%Apr 3, 2019
- Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 22.24%Apr 2, 2019
- Unknown2FA sessions not properly expired on password changeCheck if you run itEPSS 0.32%Apr 1, 2019
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 8.26%Apr 1, 2019
- UnknownMicrosoft Internet Explorer Out-of-bounds WritePatch nowKEVEPSS 31.26%Apr 1, 2019
- UnknownMicrosoft Internet Explorer Out-of-bounds WritePatch nowKEVEPSS 20.40%Apr 1, 2019
- UnknownWindows SMB Remote Code ExecutionPatch nowKEVEPSS 13.04%Apr 1, 2019
- UnknownWindows SMB Remote Code ExecutionPatch nowKEVEPSS 17.39%Apr 1, 2019
- High7.5Rails Ruby on Rails Path Traversal VulnerabilityPatch nowKEVEPSS 98.51%Mar 27, 2019
- Critical9.8Kentico Xperience Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 95.07%Mar 26, 2019
- UnknownReflected XSS in redirect of the UpdaterCheck if you run itEPSS 0.73%Mar 26, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed.Check if you run itEPSS 5.12%Mar 25, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed.Check if you run itEPSS 5.42%Mar 25, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit sign…Check if you run itEPSS 6.13%Mar 25, 2019
- High8.8An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.Check if you run itEPSS 6.13%Mar 25, 2019
- High8.8A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side.Check if you run itEPSS 3.44%Mar 25, 2019
- Critical10.0Kibana Arbitrary Code ExecutionPatch nowKEVEPSS 95.34%Mar 25, 2019
- Critical9.8Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityPatch nowKEVEPSS 99.91%Mar 25, 2019
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 72.95%Mar 24, 2019
- Critical9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: UR…Check this weekEPSS 11.84%Mar 23, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.Check if you run itEPSS 5.25%Mar 23, 2019
- High7.5In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c.Check if you run itEPSS 6.14%Mar 22, 2019
- High7.5In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an…Check if you run itEPSS 5.35%Mar 22, 2019
- High7.5pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.Check if you run itEPSS 3.15%Mar 22, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server.Check if you run itEPSS 6.45%Mar 21, 2019
Sort