Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to…Dec 22, 2020
- Medium6.5Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrar…Dec 22, 2020
- Medium4.3Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityKEVEPSS 26.3%Jul 10, 2020
- Medium6.5Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass VulnerabilityKEVEPSS 88.4%Jul 10, 2020
- High8.1Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access…Dec 19, 2019
- High8.1Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset th…Jul 3, 2019
- Medium6.5Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated u…Jul 3, 2019
- High8.1Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.Jul 3, 2019
- Critical9.8Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a data…Jun 28, 2019
- Medium5.3Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on beh…Jun 28, 2019
- Critical9.8Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityKEVEPSS 8.1%May 22, 2019
- High8.8Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.Apr 9, 2019
- Medium6.5Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail the…Apr 9, 2019
- High7.5Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityKEVEPSS 99.9%Jan 24, 2019
- Critical9.8Apache Tomcat Remote Code Execution VulnerabilityKEVEPSS 90.3%Apr 6, 2017
- High8.8Microsoft Windows Open Type Font Remote Code Execution VulnerabilityKEVEPSS 64.6%Nov 10, 2016
- High7.8Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityKEVEPSS 68.5%Oct 13, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityKEVEPSS 93.0%Jun 7, 2016
- Medium5.5ImageMagick Arbitrary File Deletion VulnerabilityKEVEPSS 75.3%May 5, 2016
- Critical9.8Oracle Java SE and JRockit Unspecified VulnerabilityKEVEPSS 92.3%Apr 21, 2016
- Medium5.3Oracle Java SE Integrity Check VulnerabilityKEVEPSS 13.6%Oct 21, 2015
- Medium5.0The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of…Jun 7, 2015
- Critical10.0ProFTPD Improper Access Control VulnerabilityKEVEPSS 99.5%May 18, 2015
- Critical9.8Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityKEVEPSS 99.9%Feb 17, 2015
- High8.1Elasticsearch Remote Code Execution VulnerabilityKEVEPSS 88.6%Jul 28, 2014