Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that c…Check if you run itEPSS 3.16%Dec 20, 2017
- Medium6.1The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability tha…Check if you run itEPSS 0.91%Dec 20, 2017
- High8.8VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticate…Check if you run itEPSS 3.57%Dec 20, 2017
- High8.1Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests…Check if you run itEPSS 5.88%Dec 12, 2017
- High8.1Embedthis GoAhead Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.13%Dec 12, 2017
- Critical9.8Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.34%Dec 11, 2017
- High8.8sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows rem…Check if you run itEPSS 2.35%Dec 11, 2017
- Medium6.5Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote a…Check if you run itEPSS 1.97%Dec 8, 2017
- High7.8CVE-2017-11940 is listed by inventory_critical.Check this weekEPSS 20.51%Dec 8, 2017
- High7.8The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 160…Check this weekEPSS 28.33%Dec 7, 2017
- Medium4.7Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK…Check if you run itEPSS 1.15%Dec 6, 2017
- Medium6.1The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabi…Check if you run itEPSS 0.81%Dec 5, 2017
- High8.8Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.Check this weekEPSS 73.69%Dec 4, 2017
- Medium6.2In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with s…Check if you run itEPSS 4.89%Dec 1, 2017
- UnknownInstall Norton Security for Mac does not verify SSL certificates Overview Install Norton Security for Mac, prior to version 7.6, does not validate SSL certificates.Check if you run itEPSS 0.61%Nov 29, 2017
- UnknownZyXEL PK5001Z Remote Authentication BypassPatch nowKEVEPSS 12.34%Nov 24, 2017
- High7.5parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.Check if you run itEPSS 6.45%Nov 23, 2017
- Critical9.8parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTCheck if you run itEPSS 4.58%Nov 23, 2017
- Medium6.7PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating…Check if you run itEPSS 0.59%Nov 22, 2017
- Critical9.8QNAP has already patched this vulnerability.Check if you run itEPSS 1.44%Nov 22, 2017
- Critical9.8A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module.Check if you run itEPSS 3.53%Nov 21, 2017
- High8.8In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, doe…Check if you run itEPSS 6.14%Nov 20, 2017
- Medium4.3In Moodle 3.x, students can find out email addresses of other students in the same course.Check if you run itEPSS 1.16%Nov 20, 2017
- High7.5Laravel Laravel Framework Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 86.92%Nov 20, 2017
- High7.5The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e.Check if you run itEPSS 1.24%Nov 17, 2017
Sort