Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownJQuery JQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 99.22%Jan 21, 2021
- UnknownJQuery JQuery Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 86.82%Jan 21, 2021
- UnknownTerraMaster tos Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 96.39%Jan 19, 2021
- Unknowngetlaminas laminas-http Deserialization of Untrusted DataPatch nowKEVEPSS 75.31%Jan 14, 2021
- High7.8Microsoft Defender Remote Code Execution VulnerabilityPatch nowKEVEPSS 39.65%Jan 12, 2021
- UnknownCVE-2020-16044: Remote code execution in Mozilla Firefox The vulnerability allows a remote attacker to compromise vulnerable system.Check if you run itEPSS 1.30%Jan 7, 2021
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 78.38%Dec 10, 2020
- UnknownA Threat Actor Group UNC1945 found targeting Banking & Financial Institutions, and Managed Service Providers using Malware and Exploitation Techniques A Threat Actor G…Check if you run itEPSS 2.02%Dec 7, 2020
- UnknownCVE-2020-8913: Persistent Code Execution in the Google Play Core Library A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in…Check if you run itEPSS 2.88%Dec 6, 2020
- UnknownCVE-2020-1778: OTRS Bypassing User Account Validation OTRS release Security Advisory 2020-16 which agents can bypass the login of the user account when OTRS uses multi…Check if you run itEPSS 0.65%Nov 24, 2020
- UnknownRemote kernel heap overflow in NFSv3 Windows Server Microsoft has released a patch for a critical vulnerability (CVE-2020-17051) in the Windows NFSv3 (Network File Sys…Check this weekEPSS 10.62%Nov 24, 2020
- Critical9.1Multiple VMware Products Command Injection VulnerabilityPatch nowKEVEPSS 17.30%Nov 23, 2020
- UnknownCVE-2020-16939: Privilege escalation in Microsoft Group Policy The vulnerability allows a local user to escalate privileges on the system.Check if you run itEPSS 2.42%Nov 10, 2020
- UnknownCVE-2020-15157: Containerd Bug Exposes Cloud Account Credentials Cybersecurity researchers disclosed new security risks associated with link previews in popular messag…Check if you run itEPSS 2.30%Nov 10, 2020
- High8.8Google Chromium V8 Incorrect Implementation VulnerabililtyPatch nowKEVEPSS 2.76%Nov 9, 2020
- Critical9.6Google Chrome Use-After-Free VulnerabilityPatch nowKEVEPSS 2.73%Nov 7, 2020
- UnknownCVE-2019-1368 : A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka &# A security feature bypass can…Check if you run itEPSS 1.35%Nov 4, 2020
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityPatch nowKEVEPSS 96.48%Oct 28, 2020
- Critical9.8Oracle WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Oct 21, 2020
- Critical9.8VMware ESXi OpenSLP Use-After-Free VulnerabilityPatch nowKEVEPSS 83.02%Oct 20, 2020
- UnknownCVE-2020-13943 Apache Tomcat HTTP/2 Request mix-up Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a flaw when HTTP/2 client exc…Check this weekEPSS 52.64%Oct 19, 2020
- UnknownGNU grub2 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 1.71%Oct 1, 2020
- High7.2Ivanti Pulse Connect Secure Code Execution VulnerabilityPatch nowKEVEPSS 90.76%Sep 30, 2020
- High7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP reques…Check if you run itEPSS 6.36%Sep 27, 2020
- UnknownVulnerability in IOSurfaceAccelerator - CVE-2020-9964 iOS 14 is now available to the public, and with it comes the iOS 14.0 security content update.Check if you run itEPSS 0.41%Sep 21, 2020
Sort