Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8QNAP NAS File Station Command Injection VulnerabilityPatch nowKEVEPSS 30.16%Jun 5, 2020
- UnknownPassword of share by mail is not hashed when given on the create share callCheck if you run itEPSS 1.91%Jun 4, 2020
- UnknownIncrease random used for encryptionCheck if you run itEPSS 0.37%Jun 4, 2020
- High7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).Check this weekEPSS 22.28%Jun 4, 2020
- Critical9.8rConfig rConfig Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 32.12%Jun 4, 2020
- UnknownNew users can read all Nextcloud Deck data from previous user with same usernameCheck if you run itEPSS 1.34%Jun 3, 2020
- Medium6.7systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges whe…Check if you run itEPSS 0.46%Jun 3, 2020
- Unknownbrizy brizy Improper AuthorizationPatch nowKEVEPSS 0.52%Jun 3, 2020
- Unknowngracemedia_media_player_project gracemedia_media_player Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 43.80%Jun 3, 2020
- UnknownAdobe Acrobat and Reader Out-of-bounds ReadPatch nowKEVEPSS 10.79%Jun 3, 2020
- Unknownmtheme-unus_project mtheme-unus Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 55.01%Jun 3, 2020
- Unknownwpshopstyling wp_e-commerce_shop_styling Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 24.09%Jun 3, 2020
- High7.5VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityPatch nowKEVEPSS 95.59%Jun 2, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…Check if you run itEPSS 2.23%Jun 1, 2020
- High7.2Pi-Hole AdminLTE Remote Code Execution VulnerabilityPatch nowKEVEPSS 78.34%May 29, 2020
- Medium5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.Check if you run itEPSS 0.60%May 27, 2020
- Medium5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.Check if you run itEPSS 0.66%May 27, 2020
- High7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.Check if you run itEPSS 1.02%May 27, 2020
- Medium5.5SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.Check if you run itEPSS 0.64%May 24, 2020
- Medium5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.Check if you run itEPSS 1.00%May 24, 2020
- High8.8Apache Kylin OS Command Injection VulnerabilityPatch nowKEVEPSS 97.39%May 22, 2020
- High7.0Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 53.88%May 21, 2020
- High7.0When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents an…Check this weekEPSS 55.52%May 20, 2020
- Unknownmagmi_project magmi Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 8.28%May 18, 2020
- Unknownelementor elementor_page_builder Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.57%May 17, 2020
Sort