Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.Check this weekEPSS 97.68%Oct 4, 2018
- Medium5.5Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a ..Check if you run itEPSS 1.54%Oct 1, 2018
- Unknownmodx modx_revolution Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 64.09%Sep 26, 2018
- High7.8Linux Kernel Integer Overflow VulnerabilityPatch nowKEVEPSS 14.69%Sep 25, 2018
- Critical9.8Adobe ColdFusion Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.95%Sep 25, 2018
- Critical9.3vestacp control_panel Embedded Malicious CodePatch nowKEVEPSS 0.44%Sep 25, 2018
- UnknownCVE-2017-5639Open the advisorySep 24, 2018
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.53%Sep 5, 2018
- Medium6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and otherCheck if you run itEPSS 2.54%Aug 28, 2018
- High8.1Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Aug 22, 2018
- High7.5In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names , , and ), can be abused to write ou…Check if you run itEPSS 7.88%Aug 21, 2018
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 70.04%Aug 17, 2018
- Medium6.5libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrateCheck if you run itEPSS 4.29%Aug 16, 2018
- High7.8Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.44%Aug 15, 2018
- High7.8Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.44%Aug 15, 2018
- Unknownbitcoin_red_project bitcoin_red Integer Overflow or WraparoundPatch nowKEVEPSS 1.43%Aug 15, 2018
- High8.8Microsoft Windows Shell Remote Code Execution VulnerabilityPatch nowKEVEPSS 72.62%Aug 14, 2018
- High7.2WordPress wordpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 15.17%Aug 10, 2018
- UnknownStored XSS in autocomplete suggestions for chat @-mentionsCheck if you run itEPSS 0.74%Aug 10, 2018
- UnknownStored XSS in autocomplete suggestions for file commentsCheck if you run itEPSS 0.89%Aug 10, 2018
- High8.1Laravel Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 76.57%Aug 9, 2018
- Critical9.8NUUO NVRmini Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 94.76%Aug 4, 2018
- Critical9.1MikroTik Router OS Directory Traversal VulnerabilityPatch nowKEVEPSS 95.98%Aug 2, 2018
- UnknownCVE-2017-6177Open the advisoryJul 26, 2018
- UnknownCVE-2017-6176Open the advisoryJul 26, 2018
Sort