Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownPHP PHP Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 19.84%May 21, 2012
- Critical9.8PHP-CGI Query String Parameter VulnerabilityPatch nowKEVEPSS 100.00%May 11, 2012
- UnknownPHP PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 69.27%May 9, 2012
- UnknownAdobe Flash Player object confusion Remote Code ExecutionPatch nowKEVEPSS 87.09%May 4, 2012
- Critical9.8Oracle Fusion Middleware Unspecified VulnerabilityPatch nowKEVEPSS 7.83%May 3, 2012
- Unknownxpressengine zeroboard Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.02%Apr 12, 2012
- High7.8Microsoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityPatch nowKEVEPSS 87.66%Apr 10, 2012
- Critical9.3CVE-2012-0725 is listed by apple.Check if you run itEPSS 1.99%Apr 6, 2012
- Critical9.3CVE-2012-0724 is listed by apple.Check if you run itEPSS 1.99%Apr 6, 2012
- Unknownwebglimpse webglimpse Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.17%Mar 20, 2012
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 86.33%Mar 13, 2012
- Unknownparallels parallels_plesk_panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.04%Mar 12, 2012
- Critical9.3The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameterPatch nowKEVEPSS 0.48%Mar 12, 2012
- High8.1Adobe Flash Player Memory Corruption VulnerabilityPatch nowKEVEPSS 91.09%Feb 16, 2012
- Medium6.1Adobe Flash Player Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 6.19%Feb 16, 2012
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 82.26%Feb 10, 2012
- Unknownmathieu_vidal mv_cooking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.29%Feb 2, 2012
- UnknownLinux kernel before 3.2.2 Process Memory Modification VulnerabilityPatch nowKEVEPSS 10.84%Jan 27, 2012
- UnknownWindows Media Player (WMP) MIDI Remote Code Execution VulnerabilityPatch nowKEVEPSS 69.65%Jan 26, 2012
- Critical9.3Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 4.01%Jan 19, 2012
- Medium4.0CVE-2012-0495 is listed by oracle.Check if you run itEPSS 2.31%Jan 18, 2012
- Low1.7Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors.Check if you run itEPSS 0.36%Jan 18, 2012
- Low2.1CVE-2012-0493 is listed by oracle.Check if you run itEPSS 1.99%Jan 18, 2012
- Low2.1CVE-2012-0492 is listed by oracle.Check if you run itEPSS 2.51%Jan 18, 2012
- Medium4.0CVE-2012-0491 is listed by oracle.Check if you run itEPSS 2.36%Jan 18, 2012
Sort