Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Linux Kernel Improper Privilege Management VulnerabilityKEVEPSS 52.2%Jul 17, 2019
- Critical9.8A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3…Jun 7, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityKEVEPSS 65.0%Apr 8, 2019
- High7.5Rails Ruby on Rails Path Traversal VulnerabilityKEVEPSS 98.5%Mar 27, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit sign…Mar 25, 2019
- High8.8An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.Mar 25, 2019
- High8.8A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side.Mar 25, 2019
- Critical10.0Kibana Arbitrary Code ExecutionKEVEPSS 95.3%Mar 25, 2019
- Critical9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: UR…Mar 23, 2019
- High8.8An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.Mar 21, 2019
- Critical9.8Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.Mar 8, 2019
- Critical9.9Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityKEVEPSS 97.1%Mar 8, 2019
- Critical9.9Jenkins Script Security Plugin Sandbox Bypass VulnerabilityKEVEPSS 74.4%Mar 8, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.Jan 31, 2019
- High7.8Adobe Flash Player Use-After-Free VulnerabilityKEVEPSS 89.6%Jan 18, 2019
- High8.8Google Chromium V8 Out-of-Bounds Write VulnerabilityKEVEPSS 35.6%Dec 11, 2018
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityKEVEPSS 98.3%Dec 10, 2018
- High8.8Google Chromium V8 Integer Overflow VulnerabilityKEVEPSS 60.3%Nov 14, 2018
- High8.8Google Chromium V8 Remote Code Execution VulnerabilityKEVEPSS 84.6%Nov 14, 2018
- Critical9.8Red Hat JBoss RichFaces Framework Expression Language Injection VulnerabilityKEVEPSS 74.2%Nov 6, 2018
- High7.8Linux Kernel Integer Overflow VulnerabilityKEVEPSS 14.7%Sep 25, 2018
- Medium6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.…Aug 28, 2018
- High7.8Adobe Flash Player Stack-based Buffer Overflow VulnerabilityKEVEPSS 25.1%Jul 9, 2018
- Medium4.7Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during t…Jun 13, 2018