Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 8.36%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Code Execution VulnerabilityPatch nowKEVEPSS 1.82%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.70%Dec 21, 2018
- High7.8GIGABYTE Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 4.60%Dec 21, 2018
- Medium5.9Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API.Check if you run itEPSS 1.38%Dec 20, 2018
- Medium6.5Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms.Check if you run itEPSS 1.46%Dec 20, 2018
- Critical9.8Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.Check this weekEPSS 86.42%Dec 20, 2018
- Medium5.4Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbi…Check if you run itEPSS 0.74%Dec 20, 2018
- UnknownSchneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4 Privilege EscalationPatch nowKEVEPSS 0.42%Dec 20, 2018
- High7.4Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation.Check if you run itEPSS 0.65%Dec 19, 2018
- High7.5Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityPatch nowKEVEPSS 29.61%Dec 19, 2018
- Medium6.1An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1.Check if you run itEPSS 1.49%Dec 18, 2018
- Medium5.3An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1.Check if you run itEPSS 3.59%Dec 18, 2018
- Medium6.5Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.Check if you run itEPSS 7.28%Dec 13, 2018
- High7.5Apache OFBiz Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 25.74%Dec 13, 2018
- High7.5An issue was discovered in dns.c in HAProxy through 1.8.14.Check if you run itEPSS 6.59%Dec 12, 2018
- High7.5An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14.Check if you run itEPSS 4.15%Dec 12, 2018
- High8.8An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected Sh…Check if you run itEPSS 6.13%Dec 12, 2018
- High7.8A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint R…Check this weekEPSS 15.90%Dec 12, 2018
- Medium4.3CVE-2018-8604 is listed by inventory_critical.Check if you run itEPSS 2.41%Dec 12, 2018
- Medium4.3Microsoft SharePoint Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.42%Dec 12, 2018
- High7.8Microsoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityPatch nowKEVEPSS 22.35%Dec 11, 2018
- High7.5A SQL injection issue was discovered in ERPNext 10.x and 11.x through 11.0.3-beta.29.Check if you run itEPSS 1.43%Dec 11, 2018
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.53%Dec 11, 2018
- High8.8Google Chromium V8 Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 35.64%Dec 11, 2018
Sort