Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownUltimate Addons for Elementor plugin before 1.24.2 for WordPress Unauthenticated Subscriber User BypassPatch nowKEVEPSS 2.31%May 17, 2020
- UnknownImproper access control allows injecting tasks into other users decksCheck if you run itEPSS 0.64%May 15, 2020
- UnknownXootiX login\/signup_popup Missing AuthorizationPatch nowKEVEPSS 0.70%May 14, 2020
- Medium4.8Oracle iplanet_web_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.28%May 10, 2020
- Medium4.4iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.Check if you run itEPSS 0.40%May 9, 2020
- High7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.Check if you run itEPSS 1.90%May 9, 2020
- High7.2Plex Media Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 72.75%May 8, 2020
- Medium4.3IBM Data Risk Manager Directory Traversal VulnerabilityPatch nowKEVEPSS 68.54%May 7, 2020
- Critical9.1IBM Data Risk Manager Remote Code Execution VulnerabilityPatch nowKEVEPSS 61.69%May 7, 2020
- Critical9.8IBM Data Risk Manager Security Bypass VulnerabilityPatch nowKEVEPSS 70.03%May 7, 2020
- Unknowncomtrend vr-3033_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.13%May 7, 2020
- Unknownavm fritz\!box Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 72.12%May 7, 2020
- High7.5Cisco ASA and FTD Information Disclosure VulnerabilityPatch nowKEVEPSS 71.50%May 6, 2020
- Critical9.8Roundcube Webmail Remote Code Execution VulnerabilityPatch nowKEVEPSS 84.46%May 4, 2020
- Critical9.8Juniper Junos OS Path Traversal VulnerabilityPatch nowKEVEPSS 4.87%May 4, 2020
- UnknownJustSystems Ichitaro/Ichitaro Pro/Government/Portable/Viewer/JUST School Unspecified Code Execution VulnerabilityPatch nowKEVEPSS 4.17%May 1, 2020
- UnknownJustSystems Ichitaro/Government/Just School Product Character Attribute Processing VulnerabilityPatch nowKEVEPSS 5.56%May 1, 2020
- UnknownJustSystems Ichitaro/Ichitaro Government Assisted Remote Code Execution VulnerabilityPatch nowKEVEPSS 4.04%May 1, 2020
- High7.0A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out.Check if you run itEPSS 0.55%Apr 30, 2020
- Medium6.5SaltStack Salt Path Traversal VulnerabilityPatch nowKEVEPSS 86.18%Apr 30, 2020
- Critical9.8SaltStack Salt Authentication Bypass VulnerabilityPatch nowKEVEPSS 96.61%Apr 30, 2020
- Medium6.1JQuery Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 84.89%Apr 29, 2020
- High7.5In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).Check if you run itEPSS 4.72%Apr 28, 2020
- Medium4.3Apple iOS, iPadOS, and watchOS Memory Corruption VulnerabilityPatch nowKEVEPSS 2.23%Apr 22, 2020
- High8.8Apple iOS, iPadOS, and watchOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.34%Apr 22, 2020
Sort