Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SonicWall SMA100 SQL Injection VulnerabilityPatch nowKEVEPSS 99.91%Dec 17, 2019
- Unknownmitsubishielectric smartrtu_firmware Missing Authentication for Critical FunctionPatch nowKEVEPSS 40.88%Dec 17, 2019
- Unknownnetgain-systems enterprise_manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.23%Dec 17, 2019
- Unknowntechnicolor td5130v2_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 16.21%Dec 13, 2019
- Unknownnetgain-systems enterprise_manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.15%Dec 13, 2019
- UnknownBarracuda Networks barracuda_spam_firewall Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 5.83%Dec 13, 2019
- Critical9.8Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.74%Dec 11, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 74.44%Dec 10, 2019
- Critical9.8pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.Check if you run itEPSS 7.40%Dec 9, 2019
- High7.5SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.Check this weekEPSS 10.98%Dec 9, 2019
- Medium5.5alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.Check if you run itEPSS 0.57%Dec 9, 2019
- Critical9.8VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.13%Dec 6, 2019
- Critical9.8QNAP Photo Station Improper Access Control VulnerabilityPatch nowKEVEPSS 88.10%Dec 5, 2019
- High7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.Check if you run itEPSS 2.61%Nov 28, 2019
- UnknownYaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed.Check this weekEPSS 16.14%Nov 26, 2019
- UnknownYubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM conCheck if you run itEPSS 2.02%Nov 26, 2019
- High7.5sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.Check if you run itEPSS 3.56%Nov 25, 2019
- High8.8Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 5.49%Nov 25, 2019
- Critical9.8Sangoma FreePBX Improper Authentication VulnerabilityPatch nowKEVEPSS 55.95%Nov 21, 2019
- Medium6.5Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityPatch nowKEVEPSS 6.64%Nov 21, 2019
- Low3.3On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after…Check if you run itEPSS 0.41%Nov 19, 2019
- Unknownicegram email_subscribers_\&_newsletters Missing AuthorizationPatch nowKEVEPSS 71.40%Nov 13, 2019
- High8.8Google Chrome WebAudio Use-After-Free VulnerabilityPatch nowKEVEPSS 49.42%Oct 29, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.75%Oct 28, 2019
- High7.5GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels.Check if you run itEPSS 3.23%Oct 22, 2019
Sort