Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation VulnerabilityPatch nowKEVEPSS 11.02%Mar 14, 2017
- Critical9.8A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP (…Check this weekEPSS 21.57%Mar 13, 2017
- Critical9.8Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Mar 10, 2017
- High8.8NETGEAR DGN2200 Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 72.64%Mar 5, 2017
- Medium5.9The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) alo…Check if you run itEPSS 4.11%Mar 2, 2017
- High8.1Microsoft Edge and Internet Explorer Type Confusion VulnerabilityPatch nowKEVEPSS 80.39%Feb 26, 2017
- Critical9.8NETGEAR DGN2200 Remote Code Execution VulnerabilityPatch nowKEVEPSS 68.71%Feb 22, 2017
- High7.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a craftedCheck if you run itEPSS 2.76%Feb 3, 2017
- Critical9.8NETGEAR WNR2000v5 Router Buffer Overflow VulnerabilityPatch nowKEVEPSS 83.33%Jan 29, 2017
- High8.8Google Chromium V8 Out-of-Bounds Memory VulnerabilityPatch nowKEVEPSS 34.16%Jan 18, 2017
- High8.1NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityPatch nowKEVEPSS 89.35%Jan 17, 2017
- High7.5Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.99%Jan 17, 2017
- Critical9.8PHPMailer Command Injection VulnerabilityPatch nowKEVEPSS 99.71%Dec 30, 2016
- High7.1Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from p…Check this weekEPSS 25.08%Dec 20, 2016
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 57.73%Dec 19, 2016
- High8.8NETGEAR Multiple Routers Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 14, 2016
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 18.79%Dec 13, 2016
- High7.5Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityPatch nowKEVEPSS 87.36%Nov 29, 2016
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityPatch nowKEVEPSS 24.23%Nov 22, 2016
- High7.5Siemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.61%Nov 18, 2016
- Medium5.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but…Check if you run itEPSS 2.94%Nov 16, 2016
- Medium5.5Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Servic…Check this weekEPSS 16.48%Nov 10, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 80.00%Nov 9, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 82.78%Nov 9, 2016
- High8.8Microsoft Windows Open Type Font Remote Code Execution VulnerabilityPatch nowKEVEPSS 64.59%Nov 8, 2016
Sort