Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Fortinet FortiOS and FortiProxy Out-of-bounds WritePatch nowKEVEPSS 32.47%May 29, 2019
- High7.8A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.Check this weekEPSS 49.74%May 28, 2019
- Low3.7An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.Check if you run itEPSS 5.66%May 28, 2019
- Critical9.8deltek maconomy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.82%May 24, 2019
- High8.1stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate in…Check if you run itEPSS 2.74%May 22, 2019
- Critical9.8Schneider Electric U.motion Builder SQL Injection VulnerabilityPatch nowKEVEPSS 72.49%May 22, 2019
- Medium5.4Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection.Check if you run itEPSS 2.66%May 22, 2019
- Critical9.8Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 8.09%May 22, 2019
- UnknownVMware Spring Framework Improper Input ValidationPatch nowKEVEPSS 74.53%May 20, 2019
- High8.8Microsoft GDI Remote Code Execution VulnerabilityPatch nowKEVEPSS 21.71%May 16, 2019
- Critical9.8Microsoft Remote Desktop Services Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%May 16, 2019
- Unknown3cx live_chat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.21%May 15, 2019
- Critical9.8LG N1A1 NAS Remote Command Execution VulnerabilityPatch nowKEVEPSS 89.25%May 14, 2019
- High7.8Microsoft Windows Error Reporting (WER) Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.21%May 14, 2019
- Critical9.8WhatsApp VOIP Stack Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.08%May 13, 2019
- High8.1An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.Check if you run itEPSS 6.68%May 10, 2019
- Unknownyuzopro yuzo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.17%May 9, 2019
- Critical9.8revive-sas revive_adserver Deserialization of Untrusted DataPatch nowKEVEPSS 57.02%May 6, 2019
- High8.8Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 27.26%May 6, 2019
- Critical9.8billion 5200w-t_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 67.64%May 2, 2019
- Critical9.8Zyxel P660HN-T1A Routers Command Injection VulnerabilityPatch nowKEVEPSS 94.51%May 2, 2019
- UnknownOracle communications_diameter_signaling_router Improper Access ControlPatch nowKEVEPSS 88.83%May 1, 2019
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityPatch nowKEVEPSS 100.00%May 1, 2019
- Critical9.8Crestron Multiple Products Command Injection VulnerabilityPatch nowKEVEPSS 98.95%Apr 30, 2019
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 81.04%Apr 30, 2019
Sort