Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote a…Check if you run itEPSS 1.97%Dec 8, 2017
- High7.8CVE-2017-11940 is listed by inventory_critical.Check this weekEPSS 20.51%Dec 8, 2017
- High7.8The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 160…Check this weekEPSS 28.33%Dec 7, 2017
- Medium4.7Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK…Check if you run itEPSS 1.15%Dec 6, 2017
- Medium6.1The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabi…Check if you run itEPSS 0.81%Dec 5, 2017
- High8.8Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.Check this weekEPSS 73.69%Dec 4, 2017
- Medium6.2In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with s…Check if you run itEPSS 4.89%Dec 1, 2017
- UnknownInstall Norton Security for Mac does not verify SSL certificates Overview Install Norton Security for Mac, prior to version 7.6, does not validate SSL certificates.Check if you run itEPSS 0.61%Nov 29, 2017
- UnknownZyXEL PK5001Z Remote Authentication BypassPatch nowKEVEPSS 12.34%Nov 24, 2017
- High7.5parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.Check if you run itEPSS 6.45%Nov 23, 2017
- Critical9.8parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTCheck if you run itEPSS 4.58%Nov 23, 2017
- Medium6.7PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating…Check if you run itEPSS 0.59%Nov 22, 2017
- Critical9.8QNAP has already patched this vulnerability.Check if you run itEPSS 1.44%Nov 22, 2017
- Critical9.8A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module.Check if you run itEPSS 3.53%Nov 21, 2017
- High8.8In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, doe…Check if you run itEPSS 6.14%Nov 20, 2017
- Medium4.3In Moodle 3.x, students can find out email addresses of other students in the same course.Check if you run itEPSS 1.16%Nov 20, 2017
- High7.5Laravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Nov 20, 2017
- High7.5The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e.Check if you run itEPSS 1.24%Nov 17, 2017
- High7.5VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service.Check if you run itEPSS 2.32%Nov 17, 2017
- UnknownWindows olecnv32.dll Remote Code Execution VulnerabilityPatch nowKEVEPSS 52.11%Nov 16, 2017
- High7.5ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web appl…Check this weekEPSS 10.36%Nov 15, 2017
- High8.8ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevatio…Check if you run itEPSS 9.40%Nov 15, 2017
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 99.94%Nov 14, 2017
- High7.5A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during…Check this weekEPSS 39.92%Nov 13, 2017
- High7.8Roundcube Webmail File Disclosure VulnerabilityPatch nowKEVEPSS 45.74%Nov 8, 2017
Sort