Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityKEVEPSS 53.0%Apr 8, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityKEVEPSS 65.0%Apr 8, 2019
- High7.5Rails Ruby on Rails Path Traversal VulnerabilityKEVEPSS 98.5%Mar 27, 2019
- Critical9.8Kentico Xperience Deserialization of Untrusted Data VulnerabilityKEVEPSS 95.1%Mar 26, 2019
- Critical10.0Kibana Arbitrary Code ExecutionKEVEPSS 95.3%Mar 25, 2019
- Critical9.8Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityKEVEPSS 99.9%Mar 25, 2019
- Medium6.1WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 72.9%Mar 24, 2019
- Critical9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: UR…EPSS 11.8%Mar 23, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server.EPSS 6.4%Mar 21, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.EPSS 9.3%Mar 21, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed.EPSS 7.9%Mar 21, 2019
- Critical9.1An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions.EPSS 6.3%Mar 21, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.EPSS 5.4%Mar 13, 2019
- Critical9.9Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityKEVEPSS 97.1%Mar 8, 2019
- Critical9.9Jenkins Script Security Plugin Sandbox Bypass VulnerabilityKEVEPSS 74.4%Mar 8, 2019
- Medium6.5TIBCO JasperReports Library Directory Traversal VulnerabilityKEVEPSS 79.1%Mar 7, 2019
- High8.8ThinkPHP Remote Code Execution VulnerabilityKEVEPSS 97.4%Feb 24, 2019
- High7.8WinRAR Absolute Path Traversal VulnerabilityKEVEPSS 96.0%Feb 5, 2019
- High7.5Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityKEVEPSS 99.9%Jan 24, 2019
- High7.2Cisco Small Business Routers Improper Input Validation VulnerabilityKEVEPSS 95.9%Jan 24, 2019
- Critical9.8ThinkPHP "noneCms" Remote Code Execution VulnerabilityKEVEPSS 99.5%Dec 11, 2018
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityKEVEPSS 98.3%Dec 10, 2018
- High8.8Google Chromium V8 Remote Code Execution VulnerabilityKEVEPSS 84.6%Nov 14, 2018
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityKEVEPSS 70.0%Oct 10, 2018
- Medium4.3When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.Oct 4, 2018