Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorp…Check this weekEPSS 10.60%Jan 2, 2019
- Critical10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2…Check this weekEPSS 10.46%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes f…Check if you run itEPSS 7.52%Jan 2, 2019
- Unknownkguardsecurity kg-sha104_firmware Improper AuthenticationPatch nowKEVEPSS 4.66%Jan 1, 2019
- Medium4.7GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_Check if you run itEPSS 0.53%Dec 26, 2018
- High7.5Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt.Check if you run itEPSS 5.79%Dec 23, 2018
- Critical9.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.36%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 1.82%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.70%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 4.60%Dec 21, 2018
- UnknownSchneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4 Privilege EscalationPatch nowKEVEPSS 0.42%Dec 20, 2018
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 29.61%Dec 19, 2018
- High7.5Apache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Dec 13, 2018
- High7.8Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityPatch nowKEVEPSS 22.18%Dec 11, 2018
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.53%Dec 11, 2018
- High8.8Google Chromium V8 Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.64%Dec 11, 2018
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.33%Dec 10, 2018
- Medium6.5cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an applicati…Check if you run itEPSS 1.71%Dec 5, 2018
- Critical9.1The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, bec…Check if you run itEPSS 3.92%Dec 5, 2018
- High7.5In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closedCheck if you run itEPSS 5.53%Dec 4, 2018
- High7.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 89.58%Nov 29, 2018
- Unknowninpage inpage Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 1.50%Nov 29, 2018
- Medium6.1TOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Nov 26, 2018
- High7.8An issue was discovered in JasPer 2.0.14.Check if you run itEPSS 1.55%Nov 26, 2018
- Medium6.5An issue was discovered in JasPer 2.0.14.Check if you run itEPSS 1.95%Nov 26, 2018
Sort