Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation.Check if you run itEPSS 5.70%Mar 6, 2019
- UnknownWebDAV Elevation of Privilege VulnerabilityPatch nowKEVEPSS 22.84%Mar 6, 2019
- High8.1CVE-2019-0724 is listed by An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi…Check this weekEPSS 23.80%Mar 5, 2019
- High7.4CVE-2019-0686 is listed by An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi…Check if you run itEPSS 5.03%Mar 5, 2019
- High8.8CVE-2019-0594 is listed by inventory_critical.Check this weekEPSS 12.06%Mar 5, 2019
- UnknownCVE-2016-8767Open the advisoryMar 5, 2019
- Critical9.8Microsoft SharePoint Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Mar 5, 2019
- High7.5In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of fa…Check if you run itEPSS 1.59%Mar 1, 2019
- High7.5The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make i…Check if you run itEPSS 1.42%Mar 1, 2019
- UnknownAdobe ColdFusion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 67.84%Mar 1, 2019
- UnknownCisco rv110w_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 95.71%Mar 1, 2019
- Medium5.5In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.Check if you run itEPSS 1.96%Feb 27, 2019
- UnknownNVD - CVE-2017-14937 The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus (or the…Check if you run itEPSS 0.99%Feb 27, 2019
- Medium6.5Google Chrome Blink Use-After-Free VulnerabilityPatch nowKEVEPSS 61.09%Feb 27, 2019
- Critical9.8In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regula…Check if you run itEPSS 4.73%Feb 26, 2019
- High7.5libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related…Check if you run itEPSS 2.92%Feb 24, 2019
- High7.2zzzcms zzzphp Improper Neutralization of Special Elements used in an Expression Language StatementPatch nowKEVEPSS 31.42%Feb 23, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.87%Feb 22, 2019
- High8.1Drupal Core Remote Code Execution VulnerabilityPatch nowKEVEPSS 92.02%Feb 21, 2019
- Unknownasustor adm Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 43.66%Feb 21, 2019
- UnknownThinkPHP ThinkPHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Feb 21, 2019
- Unknownnetwork-weathermap .network_weathermap Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.68%Feb 21, 2019
- UnknownHorde dynamic_imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.35%Feb 21, 2019
- High7.5MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability.Check this weekEPSS 15.70%Feb 20, 2019
- Unknownxiongmaitech mbd6304t Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.43%Feb 20, 2019
Sort