Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityVuln · CVE-2014-6332 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 94.92%Nov 11, 2014
High7.8Microsoft Win32k Privilege Escalation VulnerabilityVuln · CVE-2014-4113 · Microsoft · Win32k · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 86.93%Oct 14, 2014
Critical9.8Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityVuln · CVE-2014-6287 · Rejetto · HTTP File Server · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.32%Oct 7, 2014
Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityVuln · CVE-2014-7169 · GNU · Bourne-Again Shell (Bash) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 99.94%Sep 24, 2014
Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityVuln · CVE-2014-6271 · GNU · Bourne-Again Shell (Bash) · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 100.00%Sep 24, 2014
Medium4.3Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows r…Vuln · CVE-2013-6853 · Apple · toolbar · Apple Security Releases · CVE.org · FIRST EPSSCheck if you run itEPSS 1.93%Jan 26, 2014
Critical9.8Apache Struts Improper Input Validation VulnerabilityVuln · CVE-2013-2251 · Apache · Struts · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 100.00%Jul 18, 2013
High8.8Microsoft Internet Explorer Use-After-Free VulnerabilityVuln · CVE-2012-4792 · Microsoft · Internet Explorer · CISA KEV · CVE.org · FIRST EPSS · Internet Explorer, MicrosoftPatch nowKEVEPSS 78.82%Dec 29, 2012
UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferVuln · CVE-2011-2140 · Adobe · Flash Player · CVE.org · FIRST EPSS · Packet Storm Security · Adobe, FlashPatch nowKEVEPSS 82.26%Feb 10, 2012
High7.8Linux Kernel Improper Input Validation VulnerabilityVuln · CVE-2010-3904 · Linux · Kernel · CISA KEV · CVE.org · FIRST EPSS · LinuxPatch nowKEVEPSS 15.86%Dec 6, 2010
UnknownRed Hat linux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2000-0322 · Red Hat · linux · CVE.org · FIRST EPSS · Packet Storm Security · Linux, Red HatPatch nowKEVEPSS 41.63%Feb 15, 2010
UnknownRed Hat Linux Piranha Package Linux Virtual Server (LVS) VulnerabilityVuln · CVE-2000-0248 · Red Hat · linux · CVE.org · FIRST EPSS · Packet Storm Security · Linux, Red HatPatch nowKEVEPSS 73.66%Feb 15, 2010
UnknownApache HTTP Server Improper Certificate ValidationVuln · CVE-2009-3555 · Apache · HTTP Server · CVE.org · FIRST EPSS · Packet Storm Security · ApachePatch nowKEVEPSS 87.26%Nov 18, 2009