Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (PFE).Check if you run itEPSS 0.35%Jan 15, 2019
- Critical10.0The vMX Series software uses a predictable IP ID Sequence Number.Check if you run itEPSS 1.73%Jan 15, 2019
- Critical9.8A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, QFX and M…Check if you run itEPSS 5.26%Jan 15, 2019
- Medium5.3On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers.Check if you run itEPSS 1.16%Jan 15, 2019
- Medium5.9When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reach…Check if you run itEPSS 1.92%Jan 15, 2019
- Critical9.8On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect.Check if you run itEPSS 2.38%Jan 15, 2019
- High7.5Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber manageme…Check if you run itEPSS 3.05%Jan 15, 2019
- High8.8In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the rights of at least a Salesma…Check if you run itEPSS 2.69%Jan 15, 2019
- High8.8Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.Check if you run itEPSS 1.11%Jan 15, 2019
- Medium6.5Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream c…Check this weekEPSS 27.07%Jan 15, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.42%Jan 13, 2019
- Medium5.3OpenBSD openssh Incorrect AuthorizationPatch nowKEVEPSS 3.68%Jan 10, 2019
- Medium6.5In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component i…Check if you run itEPSS 3.43%Jan 9, 2019
- High7.8An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/…Check if you run itEPSS 0.43%Jan 9, 2019
- Medium5.4A session fixation vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java tha…Check if you run itEPSS 1.22%Jan 9, 2019
- Medium6.5A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java th…Check if you run itEPSS 1.47%Jan 9, 2019
- Medium6.1A cross-site scripting vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/Api.java that allows attackers to…Check if you run itEPSS 1.53%Jan 9, 2019
- Medium6.5A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows atta…Check if you run itEPSS 4.02%Jan 9, 2019
- Medium6.5An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Micros…Check if you run itEPSS 4.63%Jan 8, 2019
- Critical9.8CVE-2019-0586 is listed by inventory_critical.Check this weekEPSS 15.40%Jan 8, 2019
- High8.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution V…Check this weekEPSS 21.97%Jan 8, 2019
- High7.5CVE-2019-0564 is listed by A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerabilit…Check if you run itEPSS 8.39%Jan 8, 2019
- Medium5.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint se…Check if you run itEPSS 1.66%Jan 8, 2019
- Medium5.5An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This a…Check if you run itEPSS 7.92%Jan 8, 2019
- Medium5.4CVE-2019-0558 is listed by inventory_critical.Check if you run itEPSS 2.00%Jan 8, 2019
Sort