Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownxpressengine zeroboard Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.02%Apr 12, 2012
- High7.8Microsoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityPatch nowKEVEPSS 87.66%Apr 10, 2012
- Critical9.3CVE-2012-0725 is listed by apple.Check if you run itEPSS 1.99%Apr 6, 2012
- Critical9.3CVE-2012-0724 is listed by apple.Check if you run itEPSS 1.99%Apr 6, 2012
- Unknownwebglimpse webglimpse Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 4.17%Mar 20, 2012
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 86.33%Mar 13, 2012
- Unknownparallels parallels_plesk_panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 6.04%Mar 12, 2012
- Critical9.3The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameterPatch nowKEVEPSS 0.48%Mar 12, 2012
- High8.1Adobe Flash Player Memory Corruption VulnerabilityPatch nowKEVEPSS 91.09%Feb 16, 2012
- Medium6.1Adobe Flash Player Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 6.19%Feb 16, 2012
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 82.26%Feb 10, 2012
- Unknownmathieu_vidal mv_cooking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.29%Feb 2, 2012
- UnknownLinux kernel before 3.2.2 Process Memory Modification VulnerabilityPatch nowKEVEPSS 10.84%Jan 27, 2012
- UnknownWindows Media Player (WMP) MIDI Remote Code Execution VulnerabilityPatch nowKEVEPSS 69.65%Jan 26, 2012
- Critical9.3Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 4.01%Jan 19, 2012
- Medium4.0CVE-2012-0495 is listed by oracle.Check if you run itEPSS 2.31%Jan 18, 2012
- Low1.7Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors.Check if you run itEPSS 0.36%Jan 18, 2012
- Low2.1CVE-2012-0493 is listed by oracle.Check if you run itEPSS 1.99%Jan 18, 2012
- Low2.1CVE-2012-0492 is listed by oracle.Check if you run itEPSS 2.51%Jan 18, 2012
- Medium4.0CVE-2012-0491 is listed by oracle.Check if you run itEPSS 2.36%Jan 18, 2012
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.Check if you run itEPSS 2.90%Jan 18, 2012
- Medium4.0CVE-2012-0489 is listed by oracle.Check if you run itEPSS 2.36%Jan 18, 2012
- Medium4.0CVE-2012-0488 is listed by oracle.Check if you run itEPSS 2.36%Jan 18, 2012
- Medium4.0CVE-2012-0487 is listed by oracle.Check if you run itEPSS 2.36%Jan 18, 2012
- Medium5.0CVE-2012-0486 is listed by oracle.Check if you run itEPSS 3.19%Jan 18, 2012
Sort