Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8ASUS asuswrt Missing AuthorizationPatch nowKEVEPSS 85.16%Jan 22, 2018
- Critical9.8AsusWRT 'handle_request' Function Authentication BypassPatch nowKEVEPSS 87.53%Jan 22, 2018
- Medium6.1JQuery JQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 29.73%Jan 18, 2018
- Unknownclaymore_dual_miner_project claymore_dual_miner Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.89%Jan 17, 2018
- UnknownLinux Kernel ping_unhash Function Privilege EscalationPatch nowKEVEPSS 2.47%Jan 16, 2018
- UnknownLinux Kernel MSM_CAM_IOCTL_SET_MEM_MAP_INFO Privilege EscalationPatch nowKEVEPSS 0.89%Jan 16, 2018
- UnknownPHP PHP Improper Input ValidationPatch nowKEVEPSS 52.09%Jan 15, 2018
- UnknownPHP sapi/cgi/cgi_main.c Component VulnerabilityPatch nowKEVEPSS 33.67%Jan 15, 2018
- UnknownMicrosoft IIS SERVER_NAME Variable Bypass VulnerabilityPatch nowKEVEPSS 44.37%Jan 15, 2018
- UnknownSchneider Electric triconex_tricon_mp_3008_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.20%Jan 12, 2018
- High8.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 95.12%Jan 9, 2018
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 93.29%Jan 9, 2018
- Medium5.6Intel atom_c Observable DiscrepancyPatch nowKEVEPSS 93.84%Jan 4, 2018
- Critical9.8Primetek Primefaces Remote Code Execution VulnerabilityPatch nowKEVEPSS 94.10%Jan 3, 2018
- UnknownMirasvit helpdesk_mx Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.60%Dec 28, 2017
- Unknownhuawei hg532_firmware Improper Input ValidationPatch nowKEVEPSS 78.28%Dec 21, 2017
- High8.1Embedthis GoAhead Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.13%Dec 12, 2017
- Critical9.8Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.34%Dec 11, 2017
- High8.8sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows rem…Check if you run itEPSS 2.35%Dec 11, 2017
- UnknownZyXEL PK5001Z Remote Authentication BypassPatch nowKEVEPSS 12.34%Nov 24, 2017
- High7.5parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.Check if you run itEPSS 6.45%Nov 23, 2017
- Critical9.8parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTCheck if you run itEPSS 4.58%Nov 23, 2017
- Medium6.7PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating…Check if you run itEPSS 0.59%Nov 22, 2017
- UnknownWindows olecnv32.dll Remote Code Execution VulnerabilityPatch nowKEVEPSS 52.11%Nov 16, 2017
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 99.94%Nov 14, 2017
Sort