Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8GIGABYTE Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 4.60%Dec 21, 2018
- UnknownSchneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4 Privilege EscalationPatch nowKEVEPSS 0.42%Dec 20, 2018
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 29.61%Dec 19, 2018
- High7.5Apache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Dec 13, 2018
- High7.8Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityPatch nowKEVEPSS 22.18%Dec 11, 2018
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.53%Dec 11, 2018
- High8.8Google Chromium V8 Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.64%Dec 11, 2018
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.33%Dec 10, 2018
- Medium6.5cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an applicati…Check if you run itEPSS 1.71%Dec 5, 2018
- Critical9.1The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, bec…Check if you run itEPSS 3.92%Dec 5, 2018
- High7.5In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closedCheck if you run itEPSS 5.53%Dec 4, 2018
- High7.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 89.58%Nov 29, 2018
- Unknowninpage inpage Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 1.50%Nov 29, 2018
- Medium6.1TOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Nov 26, 2018
- High7.8An issue was discovered in JasPer 2.0.14.Check if you run itEPSS 1.55%Nov 26, 2018
- Medium6.5An issue was discovered in JasPer 2.0.14.Check if you run itEPSS 1.95%Nov 26, 2018
- High8.8An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900…Check if you run itEPSS 2.80%Nov 26, 2018
- High8.8An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900…Check if you run itEPSS 2.29%Nov 26, 2018
- Medium6.5An issue was discovered in JasPer 2.0.14.Check if you run itEPSS 1.95%Nov 26, 2018
- Medium5.5An issue was discovered in sysstat 12.1.1.Check if you run itEPSS 0.82%Nov 24, 2018
- High7.8An issue was discovered in sysstat 12.1.1.Check if you run itEPSS 1.71%Nov 21, 2018
- Critical9.8Paessler PRTG Network Monitor Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.94%Nov 21, 2018
- Unknownmagazine3 amp_for_wp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.06%Nov 20, 2018
- UnknownEvent details leaked when sharing a non-public calendar eventCheck if you run itEPSS 0.71%Nov 15, 2018
- High8.8Google Chromium V8 Integer Overflow VulnerabilityPatch nowKEVEPSS 60.30%Nov 14, 2018
Sort