Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownYubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM conCheck if you run itEPSS 2.02%Nov 26, 2019
- High7.5sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.Check if you run itEPSS 3.59%Nov 25, 2019
- High8.8Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 5.49%Nov 25, 2019
- Critical9.8Sangoma FreePBX Improper Authentication VulnerabilityPatch nowKEVEPSS 55.95%Nov 21, 2019
- Medium6.5Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 6.64%Nov 21, 2019
- UnknownMissing sanitization in iOS App allows XSSCheck if you run itEPSS 0.78%Nov 20, 2019
- Low3.3On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after…Check if you run itEPSS 0.41%Nov 19, 2019
- Unknownnginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)Check if you run itEPSS 3.99%Nov 19, 2019
- Unknownicegram email_subscribers_\&_newsletters Missing AuthorizationPatch nowKEVEPSS 71.40%Nov 13, 2019
- UnknownPacemaker before 1.1.6 configure script creates temporary files insecurelyCheck if you run itEPSS 0.49%Nov 12, 2019
- High7.8Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 30.17%Nov 12, 2019
- High7.8Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.59%Nov 12, 2019
- High7.8Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.60%Nov 12, 2019
- UnknownLogin and token disclosure to other Nextcloud servicesCheck if you run itEPSS 1.08%Nov 12, 2019
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 77.29%Nov 12, 2019
- Unknownclamav 0.91.2 suffers from a floating point exception when using ScanOLE2.Check if you run itEPSS 2.23%Nov 7, 2019
- Unknownsimplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.Check if you run itEPSS 0.74%Nov 6, 2019
- UnknownThere is a possible heap overflow in libclamav/fsg.c before 0.100.0.Check if you run itEPSS 1.53%Nov 6, 2019
- High7.8There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program".Check if you run itEPSS 0.63%Nov 4, 2019
- Medium5.5Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.Check if you run itEPSS 0.35%Nov 1, 2019
- Unknowngpw generates shorter passwords than requiredCheck if you run itEPSS 1.50%Oct 29, 2019
- High8.8Google Chrome WebAudio Use-After-Free VulnerabilityPatch nowKEVEPSS 49.42%Oct 29, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.78%Oct 28, 2019
- High7.5Trend Micro OfficeScan Directory Traversal VulnerabilityPatch nowKEVEPSS 25.12%Oct 28, 2019
- UnknownDuplicate setup of second factor allowedCheck if you run itEPSS 0.61%Oct 25, 2019
Sort