Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Microsoft Windows SMB Information Disclosure VulnerabilityPatch nowKEVEPSS 9.38%Mar 12, 2019
- Critical9.8Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.Check if you run itEPSS 7.67%Mar 8, 2019
- Critical9.9Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.06%Mar 8, 2019
- Critical9.9Jenkins Script Security Plugin Sandbox Bypass VulnerabilityPatch nowKEVEPSS 74.44%Mar 8, 2019
- Medium6.5TIBCO JasperReports Library Directory Traversal VulnerabilityPatch nowKEVEPSS 79.06%Mar 7, 2019
- UnknownWebDAV Elevation of Privilege VulnerabilityPatch nowKEVEPSS 22.84%Mar 6, 2019
- Critical9.8Microsoft SharePoint Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Mar 5, 2019
- High7.5libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related…Check if you run itEPSS 2.89%Feb 24, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.87%Feb 22, 2019
- UnknownHorde dynamic_imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.35%Feb 21, 2019
- Unknownxiongmaitech mbd6304t Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.30%Feb 20, 2019
- Medium6.5Zoho ManageEngine ServiceDesk Plus (SDP) File Upload VulnerabilityPatch nowKEVEPSS 63.34%Feb 16, 2019
- High7.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 15.94%Feb 7, 2019
- Critical9.8Kaseya VSA SQL Injection VulnerabilityPatch nowKEVEPSS 86.82%Feb 4, 2019
- Unknownui airos Uncontrolled Resource ConsumptionPatch nowKEVEPSS 20.97%Jan 29, 2019
- High7.5Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityPatch nowKEVEPSS 99.88%Jan 24, 2019
- Medium4.3Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityPatch nowKEVEPSS 38.09%Jan 22, 2019
- Medium5.3In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespac…Check if you run itEPSS 0.48%Jan 21, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.42%Jan 13, 2019
- UnknownOracle Fusion Middleware WebLogic Server Unauthenticated Security BypassPatch nowKEVEPSS 50.22%Jan 8, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphi…Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.Check this weekEPSS 10.60%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorp…Check this weekEPSS 10.60%Jan 2, 2019
- Critical10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2…Check this weekEPSS 10.46%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes f…Check if you run itEPSS 7.52%Jan 2, 2019
Sort