Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2017-14392Open the advisoryJan 3, 2018
- UnknownCVE-2017-14391Open the advisoryJan 3, 2018
- Critical9.8Primetek Primefaces Remote Code Execution VulnerabilityPatch nowKEVEPSS 94.10%Jan 3, 2018
- UnknownMirasvit helpdesk_mx Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.60%Dec 28, 2017
- Unknownhuawei hg532_firmware Improper Input ValidationPatch nowKEVEPSS 78.28%Dec 21, 2017
- High8.1Embedthis GoAhead Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.13%Dec 12, 2017
- Critical9.8Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.34%Dec 11, 2017
- High8.8sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows rem…Check if you run itEPSS 2.35%Dec 11, 2017
- Medium6.2In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with s…Check if you run itEPSS 4.89%Dec 1, 2017
- UnknownZyXEL PK5001Z Remote Authentication BypassPatch nowKEVEPSS 12.34%Nov 24, 2017
- High7.5parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.Check if you run itEPSS 6.45%Nov 23, 2017
- Critical9.8parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTCheck if you run itEPSS 4.58%Nov 23, 2017
- Medium6.7PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating…Check if you run itEPSS 0.59%Nov 22, 2017
- UnknownWindows olecnv32.dll Remote Code Execution VulnerabilityPatch nowKEVEPSS 52.11%Nov 16, 2017
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 99.94%Nov 14, 2017
- High7.5A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during…Check this weekEPSS 39.66%Nov 13, 2017
- High7.8Roundcube Webmail File Disclosure VulnerabilityPatch nowKEVEPSS 45.74%Nov 8, 2017
- High7.8tgsoft vir.it_explorer Improper Input ValidationPatch nowKEVEPSS 1.51%Nov 3, 2017
- UnknownNETGEAR DGN1000 setup.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 30.36%Nov 1, 2017
- UnknownHangul Word Processor (HWP) Encapsulated PostScript VulnerabilityPatch nowKEVNov 1, 2017
- Unknowngetshortcodes shortcodes_ultimate Improper Input ValidationPatch nowKEVEPSS 12.09%Oct 31, 2017
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 32.07%Oct 26, 2017
- Unknownaccesspressthemes ultimate-form-builder-lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.80%Oct 23, 2017
- UnknownImproper Input ValidationPatch nowKEVEPSS 7.51%Oct 20, 2017
- UnknownMVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE Remote Command ExecutionPatch nowKEVEPSS 86.19%Oct 20, 2017
Sort