Updates December 2019

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

UpdatedBaseTempVulnerabilityChangeExpRemCTICVE
12/31/20196.56.2Cloud Foundry Audit Event Log information disclosure(2): vulnerability_discoverydate, advisory_confirm_urlNot DefinedOfficial Fix0.00CVE-2018-1192
12/31/20195.24.9WP Retina cross site scripting(1): vulnerability_discoverydateNot DefinedOfficial Fix0.03CVE-2018-0511
12/31/20198.58.5kkcald memory corruption(1): vulnerability_discoverydateNot DefinedNot Defined0.05CVE-2018-0510
12/31/20196.56.5kkcald cross-site request forgery(1): vulnerability_discoverydateNot DefinedNot Defined0.15CVE-2018-0509
12/31/20195.25.2kkcald cross site scripting(1): vulnerability_discoverydateNot DefinedNot Defined0.05CVE-2018-0508
12/31/20196.26.0Puppet Enterprise RBAC Access Token credentials management(2): vulnerability_discoverydate, advisory_confirm_urlNot DefinedOfficial Fix0.00CVE-2017-2297
12/31/20195.45.1Puppet Enterprise Display input validation(2): vulnerability_discoverydate, advisory_confirm_urlNot DefinedOfficial Fix0.00CVE-2017-2296
12/31/20194.84.6Puppet Enterprise MCollective Configuration 7pk security(2): vulnerability_discoverydate, advisory_confirm_urlNot DefinedOfficial Fix0.00CVE-2017-2293
12/31/20198.58.2FishEye/Crucible Double OGNL Evaluation Java access control(4): vulnerability_discoverydate, advisory_person_name, source_securityfocus_date, source_securityfocus_classNot DefinedOfficial Fix0.04CVE-2017-16861
12/31/20194.74.3GNU C Library memory corruption(3): vulnerability_discoverydate, advisory_confirm_url, countermeasure_dateProof-of-ConceptOfficial Fix0.00CVE-2017-1000409
12/31/20195.55.0GNU C Library resource management(3): vulnerability_discoverydate, advisory_confirm_url, countermeasure_dateProof-of-ConceptOfficial Fix0.00CVE-2017-1000408
12/31/20196.46.1Evergreen Access Restriction open-ils.actor.ou_setting.ancestor_default information disclosure(3): vulnerability_discoverydate, source_securityfocus_date, source_securityfocus_classNot DefinedOfficial Fix0.05CVE-2015-2204
12/31/20195.45.4Evergreen information disclosure(1): vulnerability_discoverydateNot DefinedNot Defined0.00CVE-2015-2203
12/31/20197.47.1Open Atrium OG Subgroups Module access control(1): vulnerability_discoverydateNot DefinedOfficial Fix0.08CVE-2014-9504
12/31/20196.46.1Open Atrium Discussions Sub Module access control(1): vulnerability_discoverydateNot DefinedOfficial Fix0.05CVE-2014-9503
12/31/20196.56.2Open Atrium Menu Callback cross-site request forgery(1): vulnerability_discoverydateNot DefinedOfficial Fix0.00CVE-2014-9502
12/31/20196.96.9G Data TotalProtection Driver MiniIcpt.sys access control(3): vulnerability_discoverydate, source_osvdb, source_osvdb_titleNot DefinedNot Defined0.03CVE-2014-3752
12/31/20196.46.4Linux Kernel vzkernel open_by_handle_at access control(1): vulnerability_discoverydateNot DefinedNot Defined0.05CVE-2014-3519
12/31/20198.58.2SugarCRM RSSDashlet Dashlet RSSDashlet.php xml external entity reference(3): vulnerability_discoverydate, source_osvdb, source_osvdb_titleNot DefinedOfficial Fix0.13CVE-2014-3244
12/31/20195.45.1Evergreen open-ils.pcrud Endpoint Permission information disclosure(1): vulnerability_discoverydateNot DefinedOfficial Fix0.00CVE-2013-7435
12/31/20198.58.2PacketFence login.php LDAP injection ldap injection(2): vulnerability_discoverydate, advisory_confirm_urlNot DefinedOfficial Fix0.00CVE-2011-4069
12/31/20198.58.2PacketFence login.php check_password improper authentication(2): vulnerability_discoverydate, advisory_confirm_urlNot DefinedOfficial Fix0.05CVE-2011-4068
12/31/20197.56.9CCN-lite Nonce type conversion(2): vulnerability_discoverydate, advisory_confirm_urlNot DefinedNot Defined0.05CVE-2018-6480
12/31/20197.57.3Netwave IP Camera POST Request resource management(1): vulnerability_discoverydateNot DefinedWorkaround0.02CVE-2018-6479
12/31/20199.89.8SUPERAntiSpyware Professional Trial Driver SASKUTIL.SYS input validation(1): vulnerability_discoverydateNot DefinedNot Defined0.09CVE-2018-6476
12/31/20196.56.5SUPERAntiSpyware Professional Trial DLL SUPERAntiSpyware.exe untrusted search path(1): vulnerability_discoverydateNot DefinedNot Defined0.05CVE-2018-6475
12/31/20197.27.2SUPERAntiSpyware Professional Trial Driver SASKUTIL.SYS input validation(1): vulnerability_discoverydateNot DefinedNot Defined0.17CVE-2018-6474
12/31/20197.27.2SUPERAntiSpyware Professional Trial Driver SASKUTIL.SYS input validation(1): vulnerability_discoverydateNot DefinedNot Defined0.08CVE-2018-6473
12/31/20197.27.2SUPERAntiSpyware Professional Trial Driver SASKUTIL.SYS input validation(1): vulnerability_discoverydateNot DefinedNot Defined0.05CVE-2018-6472
12/31/20197.27.2SUPERAntiSpyware Professional Trial Driver SASKUTIL.SYS input validation(1): vulnerability_discoverydateNot DefinedNot Defined0.06CVE-2018-6471

Interested in the pricing of exploits?

See the underground prices here!