Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which di…Check if you run itEPSS 1.02%Jan 23, 2019
- Critical9.8In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow.Check if you run itEPSS 3.19%Jan 23, 2019
- High8.8In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.Check if you run itEPSS 2.04%Jan 23, 2019
- High8.8In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.Check if you run itEPSS 2.53%Jan 23, 2019
- High7.2An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/AuthenticationProcessingFilt…Check if you run itEPSS 1.62%Jan 22, 2019
- High7.2An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBasedRememberMeServices…Check if you run itEPSS 1.54%Jan 22, 2019
- Medium4.3Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityPatch nowKEVEPSS 38.09%Jan 22, 2019
- Medium5.3In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespac…Check if you run itEPSS 0.48%Jan 21, 2019
- High7.8The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for si…Check if you run itEPSS 0.45%Jan 18, 2019
- High7.5BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion f…Check this weekEPSS 27.73%Jan 16, 2019
- Medium4.9CVE-2019-2537 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)..Check if you run itEPSS 4.27%Jan 16, 2019
- Medium6.5CVE-2019-2529 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)..Check if you run itEPSS 4.49%Jan 16, 2019
- Medium4.9CVE-2019-2510 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)..Check if you run itEPSS 3.44%Jan 16, 2019
- Medium6.4Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling).Check if you run itEPSS 2.51%Jan 16, 2019
- Medium4.9CVE-2019-2481 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)..Check if you run itEPSS 3.26%Jan 16, 2019
- Medium6.5CVE-2019-2455 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)..Check if you run itEPSS 3.79%Jan 16, 2019
- High8.2CVE-2019-2444 is listed by Vulnerability in the Core RDBMS component of Oracle Database Server..Check if you run itEPSS 0.44%Jan 16, 2019
- High7.2CVE-2019-2406 is listed by Vulnerability in the Core RDBMS component of Oracle Database Server..Check if you run itEPSS 1.73%Jan 16, 2019
- Critical9.1ntpsec ntpsec Out-of-bounds ReadPatch nowKEVEPSS 66.88%Jan 16, 2019
- Medium5.4A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted.Check if you run itEPSS 0.81%Jan 15, 2019
- High7.5On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down.Check if you run itEPSS 1.71%Jan 15, 2019
- High7.5The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received.Check if you run itEPSS 1.71%Jan 15, 2019
- High7.5A Denial of Service (DoS) vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the rou…Check if you run itEPSS 1.67%Jan 15, 2019
- Medium6.5The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for another address.Check if you run itEPSS 0.64%Jan 15, 2019
- High7.5An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indication of mem…Check if you run itEPSS 2.74%Jan 15, 2019
Sort