Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4CVE-2019-0557 is listed by inventory_critical.Check if you run itEPSS 2.07%Jan 8, 2019
- Medium5.4CVE-2019-0556 is listed by inventory_critical.Check if you run itEPSS 1.64%Jan 8, 2019
- High7.5CVE-2019-0548 is listed by inventory_high.Check if you run itEPSS 8.21%Jan 8, 2019
- Medium5.9Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access information whic…Check if you run itEPSS 1.56%Jan 8, 2019
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.68%Jan 8, 2019
- High8.8Microsoft MSHTML Remote Code Execution VulnerabilityPatch nowKEVEPSS 53.20%Jan 8, 2019
- UnknownOracle Fusion Middleware WebLogic Server Unauthenticated Security BypassPatch nowKEVEPSS 50.22%Jan 8, 2019
- Medium5.3ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.Check if you run itEPSS 2.46%Jan 3, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphi…Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorp…Check this weekEPSS 10.60%Jan 2, 2019
- Critical10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2…Check this weekEPSS 10.46%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes f…Check if you run itEPSS 7.52%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core cl…Check if you run itEPSS 9.68%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic…Check this weekEPSS 12.68%Jan 2, 2019
- Unknownkguardsecurity kg-sha104_firmware Improper AuthenticationPatch nowKEVEPSS 4.66%Jan 1, 2019
- Medium6.1React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time.Check if you run itEPSS 3.43%Dec 31, 2018
- Medium6.1Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.Check if you run itEPSS 4.48%Dec 26, 2018
- Medium4.7GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_Check if you run itEPSS 0.53%Dec 26, 2018
- High7.2Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a {% string fo…Check if you run itEPSS 1.53%Dec 25, 2018
- High7.2Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to inject arbitrary co…Check if you run itEPSS 1.03%Dec 24, 2018
- Critical9.8Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to steal credentia…Check if you run itEPSS 1.44%Dec 24, 2018
- Medium5.4Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 0.80%Dec 24, 2018
- Medium4.8index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.Check if you run itEPSS 3.70%Dec 24, 2018
- High7.5Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt.Check if you run itEPSS 5.79%Dec 23, 2018
Sort