Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft infopath Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 23.90%Mar 12, 2016
- High8.8Adobe Flash Player and AIR Integer Overflow VulnerabilityPatch nowKEVEPSS 19.33%Mar 10, 2016
- High7.8Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 37.05%Mar 9, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.68%Mar 8, 2016
- UnknownJustSystems Remote Code ExecutionPatch nowKEVEPSS 5.33%Mar 8, 2016
- Medium6.3The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does n…Check this weekEPSS 11.30%Feb 25, 2016
- High8.8The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes,…Check this weekEPSS 13.08%Feb 25, 2016
- Medium4.3Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the o…Check if you run itEPSS 6.23%Feb 25, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…Check if you run itEPSS 9.67%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…Check this weekEPSS 10.57%Feb 25, 2016
- Medium5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security…Check this weekEPSS 18.38%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…Check this weekEPSS 12.55%Feb 25, 2016
- UnknownJustSystems Remote Code ExecutionPatch nowKEVEPSS 4.59%Feb 23, 2016
- UnknownMicrosoft Internet Explorer Use of Uninitialized ResourcePatch nowKEVEPSS 42.10%Feb 23, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016
- Critical9.8SAP NetWeaver SQL Injection VulnerabilityPatch nowKEVEPSS 71.52%Feb 16, 2016
- High7.5Ruby on Rails Directory Traversal VulnerabilityPatch nowKEVEPSS 95.54%Feb 15, 2016
- High7.8Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."Check this weekEPSS 15.90%Feb 10, 2016
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 24.28%Feb 10, 2016
- UnknownRed Hat data_grid Deserialization of Untrusted DataPatch nowKEVEPSS 85.56%Jan 28, 2016
- Unknownmagento magento Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.74%Jan 22, 2016
- Unknownmagento magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.93%Jan 22, 2016
- Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 55.77%Jan 22, 2016
- Critical10.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confideCheck if you run itEPSS 7.21%Jan 21, 2016
- Critical10.0Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integr…Check this weekEPSS 14.71%Jan 21, 2016
Sort