Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster.Check if you run itEPSS 1.83%Dec 10, 2018
- Medium6.5A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to ha…Check if you run itEPSS 2.75%Dec 10, 2018
- High8.2A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted us…Check if you run itEPSS 6.76%Dec 10, 2018
- Medium4.3An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the abili…Check if you run itEPSS 1.37%Dec 10, 2018
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.33%Dec 10, 2018
- Medium6.5cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an applicati…Check if you run itEPSS 1.71%Dec 5, 2018
- Critical9.1The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, bec…Check if you run itEPSS 3.92%Dec 5, 2018
- High7.5In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closedCheck if you run itEPSS 5.53%Dec 4, 2018
- Medium6.5VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network a…Check if you run itEPSS 0.45%Dec 4, 2018
- High8.8VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMw…Check if you run itEPSS 1.32%Dec 4, 2018
- High7.2CVE-2018-4021 is listed by An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS…Check this weekEPSS 70.31%Dec 3, 2018
- High7.2CVE-2018-4020 is listed by An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS…Check this weekEPSS 48.72%Dec 3, 2018
- High7.2CVE-2018-4019 is listed by An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POS…Check this weekEPSS 48.72%Dec 3, 2018
- Medium6.1Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earl…Check if you run itEPSS 0.77%Nov 30, 2018
- High8.1The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions.Check if you run itEPSS 0.81%Nov 30, 2018
- High7.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 89.58%Nov 29, 2018
- Unknowninpage inpage Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 1.50%Nov 29, 2018
- Critical9.8Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have…Check if you run itEPSS 1.19%Nov 28, 2018
- High7.5Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions cou…Check if you run itEPSS 1.28%Nov 28, 2018
- High7.5NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions c…Check if you run itEPSS 1.26%Nov 28, 2018
- Critical9.8Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could al…Check if you run itEPSS 3.30%Nov 28, 2018
- High7.7Buffer Overflow vulnerability in NAS devices.Check if you run itEPSS 1.55%Nov 27, 2018
- Critical9.8TerraMaster TerraMaster OS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 16.66%Nov 27, 2018
- Medium5.5Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc.Check if you run itEPSS 0.76%Nov 27, 2018
- Medium6.1TOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Nov 26, 2018
Sort