Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications fr…Check this weekEPSS 50.90%Jul 19, 2016
- High8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site sc…Check this weekEPSS 25.74%Jul 4, 2016
- High8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary…Check this weekEPSS 13.12%Jul 4, 2016
- Medium6.5Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block end…Check this weekEPSS 15.56%Jun 30, 2016
- High7.8SolarWinds Virtualization Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.67%Jun 17, 2016
- Medium5.5Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Autom…Check this weekEPSS 26.49%Jun 16, 2016
- High7.3Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Micros…Check this weekEPSS 14.82%Jun 16, 2016
- High7.3Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatib…Check this weekEPSS 16.72%Jun 16, 2016
- High7.8Microsoft Office OLE DLL Side Loading VulnerabilityPatch nowKEVEPSS 43.31%Jun 15, 2016
- Critical9.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 20.05%Jun 15, 2016
- UnknownMicrosoft XMP Core Services Improper Input ValidationPatch nowKEVEPSS 15.71%Jun 14, 2016
- High7.5Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityPatch nowKEVEPSS 31.17%Jun 9, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- Unknownwp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.89%Jun 3, 2016
- Critical9.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.52%Jun 1, 2016
- UnknownCisco IOS Improper Input ValidationPatch nowKEVEPSS 3.90%May 26, 2016
- UnknownAdobe Reader and Acrobat Launch File Warning VulnerabilityPatch nowKEVEPSS 73.62%May 16, 2016
- Unknownimlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse.Check if you run itEPSS 2.53%May 13, 2016
- Unknownhancom hangul_word_processor Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.49%May 13, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- High7.8Microsoft Windows Media Center Remote Code Execution VulnerabilityPatch nowKEVEPSS 69.85%May 10, 2016
- High7.5Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 94.06%May 10, 2016
- Critical9.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 94.35%May 8, 2016
- Medium5.5ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 75.65%May 5, 2016
- Medium5.5ImageMagick Arbitrary File Deletion VulnerabilityPatch nowKEVEPSS 75.31%May 5, 2016
Sort