Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.6Cisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityVuln · CVE-2018-0158 · Cisco · IOS and IOS XE · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 7.19%Mar 28, 2018
High7.5Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service VulnerabilityVuln · CVE-2018-0156 · Cisco · IOS and IOS XE · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 9.36%Mar 28, 2018
Medium5.9Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service VulnerabilityVuln · CVE-2017-12319 · Cisco · IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 5.24%Mar 27, 2018
Critical9.8Cisco Secure Access Control System Java Deserialization VulnerabilityVuln · CVE-2018-0147 · Cisco · Secure Access Control System (ACS) · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 18.21%Mar 8, 2018
Critical9.8Cisco VPN Routers Remote Code Execution VulnerabilityVuln · CVE-2018-0125 · Cisco · VPN Routers · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 55.19%Feb 8, 2018
High8.1Embedthis GoAhead Remote Code Execution VulnerabilityVuln · CVE-2017-17562 · Embedthis · GoAhead · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 96.26%Dec 12, 2017
Critical9.8Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityVuln · CVE-2017-15944 · Palo Alto Networks · PAN-OS · CISA KEV · CVE.org · FIRST EPSS · Palo AltoPatch nowKEVEPSS 98.34%Dec 11, 2017
Critical9.8Cisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityVuln · CVE-2017-12240 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 13.77%Sep 28, 2017
High7.5Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityVuln · CVE-2017-12235 · Cisco · IOS · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 7.07%Sep 28, 2017
High7.5Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityVuln · CVE-2017-12234 · Cisco · IOS · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 7.07%Sep 28, 2017
High7.5Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityVuln · CVE-2017-12233 · Cisco · IOS · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 7.07%Sep 28, 2017
High7.8Microsoft .NET Framework Remote Code Execution VulnerabilityVuln · CVE-2017-8759 · Microsoft · .NET Framework · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 88.70%Sep 12, 2017
Critical9.8Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityVuln · CVE-2017-11357 · Progress · User Interface (UI) for ASP.NET AJAX · CISA KEV · CVE.org · FIRST EPSS · Microsoft, ProgressPatch nowKEVEPSS 77.68%Aug 23, 2017
High8.8Symantec Messaging Gateway Remote Code Execution VulnerabilityVuln · CVE-2017-6327 · Symantec · Symantec Messaging Gateway · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 35.91%Aug 11, 2017
High7.8Intel Ethernet Diagnostics Driver for Windows Denial-of-Service VulnerabilityVuln · CVE-2015-2291 · Intel · Ethernet Diagnostics Driver for Windows · CISA KEV · CVE.org · FIRST EPSS · Cisco, MicrosoftPatch nowKEVEPSS 9.01%Aug 9, 2017
High8.8DotNetNuke (DNN) Remote Code Execution VulnerabilityVuln · CVE-2017-9822 · DotNetNuke (DNN) · DotNetNuke (DNN) · CISA KEV · CVE.org · FIRST EPSS · DotNetNukePatch nowKEVEPSS 94.79%Jul 20, 2017
Critical9.8Citrix Multiple Products Remote Code Execution VulnerabilityVuln · CVE-2017-6316 · Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server · CISA KEV · CVE.org · FIRST EPSS · CitrixPatch nowKEVEPSS 73.03%Jul 19, 2017
Critical9.8Apache Struts 1 Improper Input Validation VulnerabilityVuln · CVE-2017-9791 · Apache · Struts · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 98.91%Jul 10, 2017
Critical9.8Cisco IOS and IOS XE Remote Code Execution VulnerabilityVuln · CVE-2017-3881 · Cisco · IOS and IOS XE · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 98.95%Mar 17, 2017
High8.1Microsoft SMBv1 Server Remote Code Execution VulnerabilityVuln · CVE-2017-0148 · Microsoft · SMBv1 · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 99.36%Mar 16, 2017
High8.8Microsoft Windows SMB Remote Code Execution VulnerabilityVuln · CVE-2017-0146 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 89.86%Mar 14, 2017
High8.8Microsoft SMBv1 Remote Code Execution VulnerabilityVuln · CVE-2017-0145 · Microsoft · SMBv1 · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 89.85%Mar 14, 2017
High8.8Microsoft Windows Server Message Block (SMBv1) Remote Code Execution VulnerabilityVuln · CVE-2017-0143 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 93.31%Mar 14, 2017
Critical9.8Apache Struts Remote Code Execution VulnerabilityVuln · CVE-2017-5638 · Apache · Struts · CISA KEV · CVE.org · FIRST EPSS · Apache, WebLogicPatch nowKEVEPSS 100.00%Mar 10, 2017
Medium5.9The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) alo…Vuln · CVE-2016-10228 · gnu · glibc · CVE.org · FIRST EPSS · NIST NVDCheck if you run itEPSS 4.11%Mar 2, 2017