Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8WhatsApp VOIP Stack Buffer Overflow VulnerabilityPatch nowKEVEPSS 30.08%May 13, 2019
- High8.1An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.Check if you run itEPSS 6.68%May 10, 2019
- Medium5.9HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys.Check if you run itEPSS 1.25%May 9, 2019
- High7.5TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonst…Check if you run itEPSS 3.92%May 9, 2019
- Unknownyuzopro yuzo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 5.17%May 9, 2019
- High7.2In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin w…Check this weekEPSS 14.69%May 8, 2019
- Medium6.1Ivanti Connect Secure and Policy Secure Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.80%May 8, 2019
- Critical9.8revive-sas revive_adserver Deserialization of Untrusted DataPatch nowKEVEPSS 57.02%May 6, 2019
- High8.8Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 27.26%May 6, 2019
- Medium6.1The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerabili…Check this weekEPSS 37.99%May 3, 2019
- Critical9.8billion 5200w-t_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 67.64%May 2, 2019
- Critical9.8Zyxel P660HN-T1A Routers Command Injection VulnerabilityPatch nowKEVEPSS 94.51%May 2, 2019
- High7.5A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006.Check this weekEPSS 91.94%May 1, 2019
- UnknownOracle communications_diameter_signaling_router Improper Access ControlPatch nowKEVEPSS 88.83%May 1, 2019
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityPatch nowKEVEPSS 100.00%May 1, 2019
- High7.5The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived pro…Check if you run itEPSS 2.05%Apr 30, 2019
- Critical9.8Crestron Multiple Products Command Injection VulnerabilityPatch nowKEVEPSS 98.95%Apr 30, 2019
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 81.04%Apr 30, 2019
- Critical9.8Oracle WebLogic Server, InjectionPatch nowKEVEPSS 99.98%Apr 26, 2019
- Medium6.1XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy S…Check if you run itEPSS 3.11%Apr 26, 2019
- High7.2In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure versi…Check this weekEPSS 65.59%Apr 26, 2019
- High7.5In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication with the Reuse Exis…Check if you run itEPSS 3.99%Apr 26, 2019
- Critical9.8In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.…Check if you run itEPSS 7.74%Apr 26, 2019
- High7.7In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow a…Check if you run itEPSS 7.29%Apr 26, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 98.54%Apr 25, 2019
Sort