Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityKEVEPSS 100.0%May 8, 2019
- High8.8Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 27.1%May 6, 2019
- Critical9.8Crestron Multiple Products Command Injection VulnerabilityKEVEPSS 99.0%Apr 30, 2019
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 81.0%Apr 30, 2019
- High7.2Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityKEVEPSS 98.5%Apr 25, 2019
- High8.8Atlassian Confluence Server and Data Center Path Traversal VulnerabilityKEVEPSS 97.0%Apr 18, 2019
- High7.8Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKEVEPSS 41.4%Apr 9, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityKEVEPSS 45.2%Apr 9, 2019
- High7.5Microsoft Internet Explorer Type Confusion VulnerabilityKEVEPSS 81.7%Apr 9, 2019
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityKEVEPSS 53.0%Apr 8, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityKEVEPSS 65.0%Apr 8, 2019
- High7.5Rails Ruby on Rails Path Traversal VulnerabilityKEVEPSS 98.5%Mar 27, 2019
- Critical9.8Kentico Xperience Deserialization of Untrusted Data VulnerabilityKEVEPSS 95.1%Mar 26, 2019
- Critical10.0Kibana Arbitrary Code ExecutionKEVEPSS 95.3%Mar 25, 2019
- Critical9.8Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityKEVEPSS 99.9%Mar 25, 2019
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 72.9%Mar 24, 2019
- Critical9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: UR…EPSS 11.8%Mar 23, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server.EPSS 6.4%Mar 21, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.EPSS 9.3%Mar 21, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed.EPSS 7.9%Mar 21, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions.EPSS 6.3%Mar 21, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.EPSS 5.4%Mar 13, 2019
- Critical9.9Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityKEVEPSS 97.1%Mar 8, 2019
- Critical9.9Jenkins Script Security Plugin Sandbox Bypass VulnerabilityKEVEPSS 74.4%Mar 8, 2019
- Medium6.5TIBCO JasperReports Library Directory Traversal VulnerabilityKEVEPSS 79.1%Mar 7, 2019