Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.8Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC.Check if you run itEPSS 1.00%Apr 24, 2019
- Medium5.9Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).Check this weekEPSS 37.62%Apr 23, 2019
- Medium4.9CVE-2019-2628 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)..Check if you run itEPSS 2.80%Apr 23, 2019
- Medium4.9CVE-2019-2627 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges)..Check if you run itEPSS 2.98%Apr 23, 2019
- High8.2Vulnerability in the Portable Clusterware component of Oracle Database Server.Check if you run itEPSS 0.42%Apr 23, 2019
- Medium4.4CVE-2019-2614 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)..Check if you run itEPSS 2.78%Apr 23, 2019
- High7.2Oracle BI Publisher Unauthorized Access VulnerabilityPatch nowKEVEPSS 92.18%Apr 23, 2019
- Medium6.1JQuery JQuery Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 86.82%Apr 20, 2019
- High8.8Atlassian Confluence Server and Data Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.03%Apr 18, 2019
- Medium5.9VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and…Check if you run itEPSS 1.04%Apr 15, 2019
- Medium6.8VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and…Check if you run itEPSS 1.11%Apr 15, 2019
- Medium6.8VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and…Check if you run itEPSS 1.67%Apr 15, 2019
- High8.1Apache Tomcat Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 99.92%Apr 15, 2019
- High8.1CVE-2019-11213 is listed by inventory_critical.Check if you run itEPSS 2.82%Apr 12, 2019
- UnknownImproper access control checks for share expiration dateCheck if you run itEPSS 0.68%Apr 12, 2019
- UnknownImproper share updates could result in extended data accessCheck if you run itEPSS 1.04%Apr 12, 2019
- UnknownClassification of calendar events is ignored by the activity streamCheck if you run itEPSS 0.85%Apr 12, 2019
- UnknownGoogle Android Incorrect Calculation of Buffer SizePatch nowKEVEPSS 0.10%Apr 12, 2019
- UnknownGoogle Android Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 20.49%Apr 12, 2019
- Unknownyellowpencil visual_css_style_editor Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 2.28%Apr 11, 2019
- High8.1MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory…Check if you run itEPSS 3.67%Apr 10, 2019
- Medium5.4The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, resulting in a…Check if you run itEPSS 1.32%Apr 10, 2019
- High8.1CVE-2019-1003049 is listed by inventory_critical.Check if you run itEPSS 2.11%Apr 10, 2019
- High8.8A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks.Check if you run itEPSS 1.56%Apr 10, 2019
- Medium4.8CVE-2019-0216 is listed by A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views..Check if you run itEPSS 2.66%Apr 10, 2019
Sort