Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8SolarWinds Virtualization Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.67%Jun 17, 2016
- High7.8Microsoft Office OLE DLL Side Loading VulnerabilityPatch nowKEVEPSS 43.31%Jun 15, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- High8.1Apache Struts Command Injection VulnerabilityPatch nowKEVEPSS 96.05%Apr 26, 2016
- High8.8Microsoft SMBv1 Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.23%Apr 22, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 47.25%Apr 7, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…Check if you run itEPSS 9.67%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…Check this weekEPSS 10.57%Feb 25, 2016
- Medium5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security…Check this weekEPSS 18.38%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…Check this weekEPSS 12.55%Feb 25, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016
- Critical9.8SAP NetWeaver SQL Injection VulnerabilityPatch nowKEVEPSS 71.52%Feb 16, 2016
- High7.8Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.00%Dec 7, 2015
- UnknownJoomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.97%Oct 29, 2015
- High7.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 65.34%Oct 13, 2015
- Critical9.8D-Link and TRENDnet Multiple Devices Remote Code Execution VulnerabilityPatch nowKEVEPSS 82.86%May 22, 2015
- Critical10.0ProFTPD Improper Access Control VulnerabilityPatch nowKEVEPSS 99.50%May 18, 2015
- Critical9.8Realtek SDK Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.98%May 1, 2015
- High7.5TP-Link Multiple Archer Devices Directory Traversal VulnerabilityPatch nowKEVEPSS 83.95%Apr 21, 2015
- Critical9.8Microsoft HTTP.sys Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Apr 14, 2015
- High7.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (…Check this weekEPSS 12.76%Mar 9, 2015
- Low1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.Check if you run itEPSS 2.91%Feb 19, 2015
- Critical9.8Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Feb 17, 2015
- Critical9.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 95.27%Jan 14, 2015
- High7.8Microsoft Windows TS WebProxy Directory Traversal VulnerabilityPatch nowKEVEPSS 75.78%Jan 13, 2015