Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 97.25%Apr 14, 2015
- Critical9.8Adobe Flash Player Memory Corruption VulnerabilityPatch nowKEVEPSS 73.86%Apr 13, 2015
- High7.8Apple OS X Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.89%Apr 10, 2015
- High7.5Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityPatch nowKEVEPSS 40.38%Apr 1, 2015
- Critical9.3Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Wo…Check this weekEPSS 18.75%Mar 11, 2015
- High7.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (…Check this weekEPSS 12.76%Mar 9, 2015
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 53.09%Feb 27, 2015
- High8.8D-Link DIR-645 Router Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.10%Feb 23, 2015
- Low1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.Check if you run itEPSS 2.91%Feb 19, 2015
- Critical9.8Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Feb 17, 2015
- Medium6.4java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle atte…Check this weekEPSS 21.04%Feb 16, 2015
- Medium6.5Microsoft Internet Explorer ASLR Bypass VulnerabilityPatch nowKEVEPSS 33.58%Feb 10, 2015
- Critical9.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 85.59%Jan 20, 2015
- High7.8Adobe Flash Player ASLR Bypass VulnerabilityPatch nowKEVEPSS 15.10%Jan 16, 2015
- Critical9.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 95.27%Jan 14, 2015
- High8.0D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 43.46%Jan 13, 2015
- High7.8Microsoft Windows TS WebProxy Directory Traversal VulnerabilityPatch nowKEVEPSS 75.78%Jan 13, 2015
- Medium4.3The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgPatch nowKEVEPSS 98.69%Jan 9, 2015
- High7.5run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.Check if you run itEPSS 2.79%Jan 6, 2015
- Medium5.0The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segm…Check if you run itEPSS 2.90%Dec 16, 2014
- High7.8Adobe Flash Player Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 20.72%Dec 9, 2014
- High8.8Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 87.33%Nov 18, 2014
- High8.8Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityPatch nowKEVEPSS 94.92%Nov 11, 2014
- High7.8Microsoft IME Japanese Privilege Escalation VulnerabilityPatch nowKEVEPSS 54.58%Nov 11, 2014
- High7.8Microsoft Windows Code Injection VulnerabilityPatch nowKEVEPSS 77.48%Oct 22, 2014
Sort