Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowntrustwallet trust_wallet_browser_extension Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.05%Apr 27, 2023
- Unknownrazer sila_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.06%Apr 27, 2023
- Critical9.8Vinga WR-AC1200 Password Parameter VulnerabilityPatch nowKEVEPSS 1.57%Apr 26, 2023
- High7.8Apptainer is an open source container platform for Linux.Check if you run itEPSS 0.37%Apr 25, 2023
- High8.1Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstrat…Check if you run itEPSS 0.84%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the br…Check if you run itEPSS 0.65%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary we…Check if you run itEPSS 0.55%Apr 25, 2023
- Critical9.1A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.Check if you run itEPSS 0.69%Apr 25, 2023
- Medium6.8A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, inclu…Check if you run itEPSS 0.48%Apr 25, 2023
- Medium4.3Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notificat…Check if you run itEPSS 0.46%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting jou…Check if you run itEPSS 0.49%Apr 25, 2023
- Medium6.5Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the de…Check if you run itEPSS 0.69%Apr 25, 2023
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.Check if you run itEPSS 1.40%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary…Check if you run itEPSS 0.56%Apr 25, 2023
- High7.5Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports…Check if you run itEPSS 0.88%Apr 25, 2023
- High8.7A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents o…Check if you run itEPSS 0.64%Apr 25, 2023
- High7.5Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment m…Check if you run itEPSS 0.56%Apr 25, 2023
- Medium6.5Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated u…Check if you run itEPSS 0.78%Apr 25, 2023
- High8.7A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.Check if you run itEPSS 0.64%Apr 25, 2023
- High7.5Service Location Protocol (SLP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 63.98%Apr 25, 2023
- High8.8Arbitrary command injection in embano1/wipCheck if you run itEPSS 3.73%Apr 24, 2023
- Medium6.5An issue was discovered in libxml2 before 2.10.4.Check if you run itEPSS 1.31%Apr 24, 2023
- Medium6.5In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault.Check if you run itEPSS 1.24%Apr 24, 2023
- Critical9.8Zyxel Multiple Firewalls OS Command Injection VulnerabilityPatch nowKEVEPSS 99.28%Apr 24, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityPatch nowKEVEPSS 98.15%Apr 24, 2023
Sort