Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In SonicWall SonicOS, administrators without full permissions can download imported certificates.Check if you run itEPSS 0.21%Feb 19, 2019
- Medium6.5Zoho ManageEngine ServiceDesk Plus (SDP) File Upload VulnerabilityPatch nowKEVEPSS 63.34%Feb 16, 2019
- Medium5.4The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaS…Check if you run itEPSS 0.91%Feb 13, 2019
- Medium4.1The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from…Check if you run itEPSS 1.22%Feb 13, 2019
- Medium5.4The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from version 7.13.0 before version…Check if you run itEPSS 0.94%Feb 13, 2019
- High8.8D-Link dir-878_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.41%Feb 13, 2019
- Critical9.8WP Cost Estimation Plugin File Upload and DeletePatch nowKEVEPSS 0.69%Feb 13, 2019
- Medium6.5Microsoft Internet Explorer Information Disclosure VulnerabilityPatch nowKEVEPSS 8.11%Feb 12, 2019
- High7.5Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.…Check if you run itEPSS 5.06%Feb 11, 2019
- High7.5Apple iOS and macOS Group Facetime VulnerabilityPatch nowKEVEPSS 2.63%Feb 8, 2019
- High7.8Apple iOS Memory Corruption VulnerabilityPatch nowKEVEPSS 4.58%Feb 7, 2019
- High7.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 15.94%Feb 7, 2019
- UnknownMozilla Firefox Custom Cursor VulnerabilityPatch nowKEVEPSS 0.73%Feb 6, 2019
- High7.8WinRAR Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 96.00%Feb 5, 2019
- Critical9.8Kaseya VSA SQL Injection VulnerabilityPatch nowKEVEPSS 86.82%Feb 4, 2019
- UnknownMozilla Firefox Denial of Service Through Successive FTP Authorization PromptsPatch nowKEVEPSS 1.08%Feb 4, 2019
- Medium5.5In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal)…Check if you run itEPSS 0.61%Feb 3, 2019
- High7.5Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remo…Check if you run itEPSS 1.74%Feb 1, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.Patch nowKEVEPSS 58.20%Jan 31, 2019
- Medium6.8OpenBSD openssh Inappropriate Encoding for Output ContextPatch nowKEVEPSS 24.90%Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.Patch nowKEVEPSS 3.81%Jan 31, 2019
- Unknownui airos Uncontrolled Resource ConsumptionPatch nowKEVEPSS 20.97%Jan 29, 2019
- High7.5Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityPatch nowKEVEPSS 99.88%Jan 24, 2019
- High7.2Cisco Small Business Routers Improper Input Validation VulnerabilityPatch nowKEVEPSS 95.92%Jan 24, 2019
- Medium6.5A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/org/kohsuke/stapler…Check if you run itEPSS 3.26%Jan 23, 2019
Sort