Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site sc…Check this weekEPSS 25.74%Jul 4, 2016
- High8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary…Check this weekEPSS 12.71%Jul 4, 2016
- Medium6.5Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block end…Check this weekEPSS 15.68%Jun 30, 2016
- High7.8SolarWinds Virtualization Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.67%Jun 17, 2016
- Medium5.5Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Autom…Check this weekEPSS 26.49%Jun 16, 2016
- High7.3Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Micros…Check this weekEPSS 14.82%Jun 16, 2016
- High7.3Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatib…Check this weekEPSS 16.72%Jun 16, 2016
- High7.8Microsoft Office OLE DLL Side Loading VulnerabilityPatch nowKEVEPSS 43.31%Jun 15, 2016
- Critical9.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 20.05%Jun 15, 2016
- High7.5Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityPatch nowKEVEPSS 31.17%Jun 9, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- Critical9.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.37%Jun 1, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- High7.8Microsoft Windows Media Center Remote Code Execution VulnerabilityPatch nowKEVEPSS 69.85%May 10, 2016
- High7.5Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 94.06%May 10, 2016
- Critical9.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 94.27%May 8, 2016
- Medium5.5ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 75.65%May 5, 2016
- Medium5.5ImageMagick Arbitrary File Deletion VulnerabilityPatch nowKEVEPSS 75.31%May 5, 2016
- High8.4ImageMagick Improper Input Validation VulnerabilityPatch nowKEVEPSS 97.48%May 4, 2016
- High8.1Apache Struts Command Injection VulnerabilityPatch nowKEVEPSS 96.53%Apr 26, 2016
- High8.8Microsoft SMBv1 Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.23%Apr 22, 2016
- Critical9.8Oracle WebLogic ClassFilter.class ServerChannelInputStream Bypass Java DeserializationPatch nowKEVEPSS 62.92%Apr 21, 2016
- Critical9.8Oracle Java SE and JRockit Unspecified VulnerabilityPatch nowKEVEPSS 92.33%Apr 21, 2016
- High7.8Microsoft Windows CSRSS Security Feature Bypass VulnerabilityPatch nowKEVEPSS 62.82%Apr 12, 2016
- Medium6.5Microsoft Internet Explorer Messaging API Information Disclosure VulnerabilityPatch nowKEVEPSS 33.33%Apr 12, 2016
Sort