Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft Office Uninitialized Memory Use VulnerabilityPatch nowKEVEPSS 34.99%Jun 9, 2015
- High8.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 14.84%Jun 9, 2015
- Medium5.0The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of…Check this weekEPSS 13.35%Jun 7, 2015
- High7.8Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…Check this weekEPSS 20.18%Jun 7, 2015
- Critical9.1Arcserve Unified Data Protection (UDP) Directory Traversal VulnerabilityPatch nowKEVEPSS 63.64%May 29, 2015
- Critical9.8D-Link and TRENDnet Multiple Devices Remote Code Execution VulnerabilityPatch nowKEVEPSS 82.69%May 22, 2015
- Critical10.0ProFTPD Improper Access Control VulnerabilityPatch nowKEVEPSS 99.50%May 18, 2015
- Critical9.3Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."Check this weekEPSS 13.51%May 13, 2015
- High7.8Microsoft Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 48.83%May 13, 2015
- Critical9.8Realtek SDK Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.97%May 1, 2015
- High7.5TP-Link Multiple Archer Devices Directory Traversal VulnerabilityPatch nowKEVEPSS 83.95%Apr 21, 2015
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 55.92%Apr 18, 2015
- Critical10.0Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…Check if you run itEPSS 6.41%Apr 16, 2015
- Critical9.8Microsoft HTTP.sys Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Apr 14, 2015
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 97.25%Apr 14, 2015
- Critical9.8Adobe Flash Player Memory Corruption VulnerabilityPatch nowKEVEPSS 73.86%Apr 13, 2015
- High7.8Apple OS X Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.89%Apr 10, 2015
- High7.5Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityPatch nowKEVEPSS 40.38%Apr 1, 2015
- Critical9.3Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Wo…Check this weekEPSS 18.75%Mar 11, 2015
- High7.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (…Check this weekEPSS 12.04%Mar 9, 2015
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 53.09%Feb 27, 2015
- High8.8D-Link DIR-645 Router Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.10%Feb 23, 2015
- Low1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.Check if you run itEPSS 2.91%Feb 19, 2015
- Critical9.8Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Feb 17, 2015
- Medium6.4java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle atte…Check this weekEPSS 21.04%Feb 16, 2015
Sort