Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow.Check if you run itEPSS 4.85%May 18, 2017
- High7.5A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801.Check if you run itEPSS 3.19%May 18, 2017
- Critical9.8Joomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.83%May 17, 2017
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server…Check this weekEPSS 15.76%May 12, 2017
- High7.3Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 84.26%May 12, 2017
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 10.03%May 9, 2017
- High7.8Microsoft Office Remote Code Execution VulnerabilityPatch nowKEVEPSS 81.01%May 9, 2017
- High7.8Microsoft Office Use-After-Free VulnerabilityPatch nowKEVEPSS 78.13%May 9, 2017
- High8.8Microsoft Internet Explorer Remote Code Execution VulnerabilityPatch nowKEVEPSS 29.64%May 9, 2017
- UnknownCalendar and addressbook names disclosedCheck if you run itEPSS 0.72%May 8, 2017
- UnknownShare tokens for public calendars disclosedCheck if you run itEPSS 1.17%May 8, 2017
- UnknownStored XSS in Gallery applicationCheck if you run itEPSS 0.64%May 8, 2017
- UnknownLimitation of app specific password scope can be bypassedCheck if you run itEPSS 0.98%May 8, 2017
- UnknownReflected XSS in error pagesCheck if you run itEPSS 0.64%May 8, 2017
- UnknownDOM XSS vulnerability in search dialogueCheck if you run itEPSS 0.74%May 8, 2017
- Critical9.8Hikvision Multiple Products Improper Authentication VulnerabilityPatch nowKEVEPSS 100.00%May 5, 2017
- Critical9.8QNAP Photo Station Unspecified VulnerabilityPatch nowKEVEPSS 0.37%May 4, 2017
- Critical9.8Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation VulnerabilityPatch nowKEVEPSS 92.19%May 2, 2017
- Critical9.8Adobe ColdFusion Deserialization VulnerabilityPatch nowKEVEPSS 90.60%Apr 27, 2017
- High7.8Artifex Ghostscript Type Confusion VulnerabilityPatch nowKEVEPSS 96.97%Apr 26, 2017
- Medium5.3CVE-2017-3567 is listed by Vulnerability in the OJVM component of Oracle Database Server..Check if you run itEPSS 1.50%Apr 24, 2017
- High8.8Google Chromium V8 Memory Corruption VulnerabilityPatch nowKEVEPSS 40.63%Apr 24, 2017
- High7.4Oracle WebLogic Server OS Command Injection VulnerabilityPatch nowKEVEPSS 95.99%Apr 24, 2017
- Critical9.8NETGEAR Multiple WAP Devices Command Injection VulnerabilityPatch nowKEVEPSS 98.29%Apr 21, 2017
- High8.8squirrelmail squirrelmail Improper Input ValidationPatch nowKEVEPSS 32.16%Apr 20, 2017
Sort