Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 18.79%Dec 13, 2016
- High7.5Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityPatch nowKEVEPSS 87.36%Nov 29, 2016
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityPatch nowKEVEPSS 24.23%Nov 22, 2016
- High7.5Siemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.61%Nov 18, 2016
- Medium5.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but…Check if you run itEPSS 2.94%Nov 16, 2016
- UnknownJenkins Jenkins Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')Patch nowKEVEPSS 96.94%Nov 16, 2016
- UnknownUnix Distributions Account Credentials VulnerabilityPatch nowKEVEPSS 53.34%Nov 11, 2016
- Medium5.5Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Servic…Check this weekEPSS 16.48%Nov 10, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 80.00%Nov 9, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 82.78%Nov 9, 2016
- High8.8Microsoft Windows Open Type Font Remote Code Execution VulnerabilityPatch nowKEVEPSS 64.59%Nov 8, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 81.14%Oct 28, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 97.25%Oct 28, 2016
- Medium6.4Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via…Check if you run itEPSS 0.36%Oct 25, 2016
- Medium6.4Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability…Check if you run itEPSS 0.34%Oct 25, 2016
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 25.20%Oct 21, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 80.97%Oct 21, 2016
- High7.0Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 83.52%Oct 18, 2016
- UnknownOpenSSH 'AllowTcpForwarding' Port Bounce VulnerabilityPatch nowKEVEPSS 11.27%Oct 12, 2016
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 57.58%Oct 11, 2016
- High7.8Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityPatch nowKEVEPSS 68.47%Oct 11, 2016
- UnknownContent-Spoofing in "dav" appCheck if you run itEPSS 2.08%Oct 10, 2016
- UnknownCVE-2016-9467 is listed by Content-Spoofing in "files" app.Check if you run itEPSS 2.97%Oct 10, 2016
- UnknownReflected XSS in Gallery applicationCheck if you run itEPSS 1.66%Oct 10, 2016
- UnknownStored XSS in CardDAV image exportCheck if you run itEPSS 1.12%Oct 10, 2016
Sort