Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 25.20%Oct 21, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 80.97%Oct 21, 2016
- High7.0Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 83.52%Oct 18, 2016
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 57.58%Oct 11, 2016
- High7.8Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityPatch nowKEVEPSS 68.47%Oct 11, 2016
- Critical9.8xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namesp…Check if you run itEPSS 8.56%Sep 25, 2016
- High7.5Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityPatch nowKEVEPSS 87.69%Sep 18, 2016
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Servic…Check this weekEPSS 54.81%Sep 14, 2016
- Medium6.5The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allow…Check if you run itEPSS 4.90%Sep 14, 2016
- Medium6.5Microsoft Internet Explorer and Edge Information Disclosure VulnerabilityPatch nowKEVEPSS 26.48%Sep 13, 2016
- Critical9.8D-Link dir-868l_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 11.93%Aug 25, 2016
- High7.8Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution VulnerabilityPatch nowKEVEPSS 22.58%Aug 15, 2016
- High8.8Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityPatch nowKEVEPSS 87.56%Aug 15, 2016
- High8.8Apple iOS Webkit Memory Corruption VulnerabilityPatch nowKEVEPSS 66.79%Aug 15, 2016
- High7.8Apple iOS Memory Corruption VulnerabilityPatch nowKEVEPSS 23.63%Aug 15, 2016
- Medium5.5Apple iOS Information Disclosure VulnerabilityPatch nowKEVEPSS 33.35%Aug 15, 2016
- High7.8Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted…Check this weekEPSS 49.83%Aug 9, 2016
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 20.47%Aug 9, 2016
- High8.8Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly h…Check if you run itEPSS 2.25%Jul 23, 2016
- High8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications fr…Check this weekEPSS 50.90%Jul 19, 2016
- High8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site sc…Check this weekEPSS 25.74%Jul 4, 2016
- High8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary…Check this weekEPSS 13.12%Jul 4, 2016
- Medium6.5Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block end…Check this weekEPSS 15.56%Jun 30, 2016
- High7.8SolarWinds Virtualization Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.67%Jun 17, 2016
- Medium5.5Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Autom…Check this weekEPSS 26.49%Jun 16, 2016
Sort