Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Apache Airflow Command InjectionKEVEPSS 99.2%Jul 16, 2020
- High8.8Apache Kylin OS Command Injection VulnerabilityKEVEPSS 97.3%May 22, 2020
- Critical9.8Apache Tomcat Improper Privilege Management VulnerabilityKEVEPSS 99.3%Feb 24, 2020
- High7.5Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityKEVEPSS 98.6%Dec 30, 2019
- Medium5.3SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c.EPSS 10.7%Dec 24, 2019
- High7.5cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.EPSS 8.0%Dec 19, 2019
- High7.5SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.EPSS 11.0%Dec 9, 2019
- High7.8Docker Desktop Community Edition Privilege Escalation VulnerabilityKEVEPSS 48.6%Aug 28, 2019
- High7.2Apache Solr DataImportHandler Code Injection VulnerabilityKEVEPSS 83.5%Aug 1, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityKEVEPSS 65.0%Apr 8, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.EPSS 58.2%Jan 31, 2019
- High8.1Apache Struts Remote Code Execution VulnerabilityKEVEPSS 100.0%Aug 22, 2018
- Critical9.8VMware Tanzu Spring Data Commons Property Binder VulnerabilityKEVEPSS 97.0%Apr 11, 2018
- High8.1Apache Tomcat Remote Code Execution VulnerabilityKEVEPSS 100.0%Oct 3, 2017
- High8.1Apache Tomcat on Windows Remote Code Execution VulnerabilityKEVEPSS 99.6%Sep 19, 2017
- High8.1Apache Struts Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.4%Sep 15, 2017
- Critical9.8Apache Struts 1 Improper Input Validation VulnerabilityKEVEPSS 98.9%Jul 10, 2017
- Critical9.8Apache Tomcat Remote Code Execution VulnerabilityKEVEPSS 90.3%Apr 6, 2017
- Critical9.8Apache Struts Remote Code Execution VulnerabilityKEVEPSS 100.0%Mar 10, 2017
- Critical9.8Apache Shiro Code Execution VulnerabilityKEVEPSS 93.0%Jun 7, 2016
- Critical9.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 98.5%Jun 1, 2016
- High8.1Apache Struts Command Injection VulnerabilityKEVEPSS 96.1%Apr 26, 2016
- Critical9.8Oracle Java SE and JRockit Unspecified VulnerabilityKEVEPSS 92.3%Apr 21, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…EPSS 9.7%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…EPSS 10.6%Feb 25, 2016