Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer ov…Check if you run itEPSS 1.45%Apr 1, 2015
- High7.5Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary…Check if you run itEPSS 5.30%Apr 1, 2015
- High7.5Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityPatch nowKEVEPSS 40.38%Apr 1, 2015
- UnknownZTE zxv10_w300_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 12.67%Mar 28, 2015
- Critical9.3Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Wo…Check this weekEPSS 18.75%Mar 11, 2015
- UnknownMicrosoft Internet Explorer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 71.70%Mar 10, 2015
- High7.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (…Check this weekEPSS 12.76%Mar 9, 2015
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 53.09%Feb 27, 2015
- High8.8D-Link DIR-645 Router Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.10%Feb 23, 2015
- UnknownMicrosoft Internet Explorer Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 12.69%Feb 23, 2015
- High7.2Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4 through 5.4.3.6, 5.5 through 5.5.4.3, 6.1 through 6.1.5.6, 6.2 before 6.2.5…Check if you run itEPSS 0.40%Feb 22, 2015
- Low1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.Check if you run itEPSS 2.91%Feb 19, 2015
- Critical9.8Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Feb 17, 2015
- Unknowncolorlib fancybox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.41%Feb 17, 2015
- Medium6.4java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle atte…Check this weekEPSS 21.04%Feb 16, 2015
- Medium6.5Microsoft Internet Explorer ASLR Bypass VulnerabilityPatch nowKEVEPSS 33.58%Feb 10, 2015
- High7.5Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a d…Check if you run itEPSS 2.16%Feb 6, 2015
- High7.5The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X,…Check if you run itEPSS 2.15%Feb 6, 2015
- Medium5.0The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 o…Check if you run itEPSS 1.98%Feb 6, 2015
- High7.5Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, a…Check if you run itEPSS 2.85%Feb 6, 2015
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 43.10%Feb 1, 2015
- UnknownMicrosoft Windows TrueType Font Parsing Vulnerability Remote Code ExecutionPatch nowKEVEPSS 27.02%Feb 1, 2015
- Critical9.3Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows a…Check if you run itEPSS 7.08%Jan 28, 2015
- Critical9.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 85.59%Jan 20, 2015
- Critical10.0Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical FunctionCheck this weekEPSS 80.69%Jan 17, 2015
Sort