Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0.Check if you run itEPSS 3.51%Oct 23, 2019
- High7.5GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels.Check if you run itEPSS 3.23%Oct 22, 2019
- UnknownFile-drop content is visible through the gallery appCheck if you run itEPSS 0.92%Oct 22, 2019
- High8.1In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…Check if you run itEPSS 3.81%Oct 21, 2019
- Critical9.8idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.Check if you run itEPSS 3.71%Oct 21, 2019
- High8.8Oracle Solaris Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.40%Oct 16, 2019
- Unknowncybelsoft thinvnc Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 96.76%Oct 16, 2019
- Medium5.4There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 2.22%Oct 14, 2019
- Medium5.3There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.Check if you run itEPSS 0.55%Oct 14, 2019
- Critical9.8Nostromo nhttpd Directory Traversal VulnerabilityPatch nowKEVEPSS 99.03%Oct 14, 2019
- High8.1LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input.Check this weekEPSS 10.45%Oct 14, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.84%Oct 10, 2019
- High7.8Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.48%Oct 10, 2019
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…Check if you run itEPSS 2.23%Oct 9, 2019
- UnknownRemoving emails from circles does not revoke access to shared itemsCheck if you run itEPSS 0.83%Oct 6, 2019
- Medium5.3sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.Check if you run itEPSS 2.83%Oct 3, 2019
- UnknownJustSystems Remote Code ExecutionPatch nowKEVEPSS 3.50%Oct 2, 2019
- UnknownApple safari Improper Restriction of Rendered UI Layers or FramesPatch nowKEVEPSS 1.03%Sep 30, 2019
- UnknownNETGEAR srx5308_firmware Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.13%Sep 30, 2019
- Critical9.8Exim Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 41.64%Sep 27, 2019
- Critical9.8D-Link Multiple Routers Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Sep 27, 2019
- High7.8Android Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 72.10%Sep 26, 2019
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.Check if you run itEPSS 0.55%Sep 25, 2019
- High7.5An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.Check if you run itEPSS 1.10%Sep 24, 2019
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Sep 24, 2019
Sort