Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key ExcCheck if you run itEPSS 2.90%Jan 9, 2016
- Critical9.8IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Patch nowKEVEPSS 97.76%Jan 2, 2016
- High8.8Adobe Flash Player Integer Overflow VulnerabilityPatch nowKEVEPSS 67.70%Dec 28, 2015
- UnknownJuniper ScreenOS VPN Sessions Unspecified Decryption Attack VulnerabilityPatch nowKEVEPSS 2.55%Dec 23, 2015
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.70%Dec 22, 2015
- Critical9.8Juniper ScreenOS Improper Authentication VulnerabilityPatch nowKEVEPSS 61.14%Dec 19, 2015
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 98.28%Dec 16, 2015
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.33%Dec 8, 2015
- High7.8Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.00%Dec 7, 2015
- High7.5Jenkins User Interface (UI) Information Disclosure VulnerabilityPatch nowKEVEPSS 23.00%Nov 25, 2015
- High8.8Microsoft Silverlight Runtime Remote Code Execution VulnerabilityPatch nowKEVEPSS 69.40%Nov 25, 2015
- Critical9.8Oracle WebLogic Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 94.99%Nov 18, 2015
- High7.5Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17,…Check this weekEPSS 10.34%Nov 13, 2015
- Critical9.3Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Offi…Check this weekEPSS 20.97%Nov 11, 2015
- UnknownAdobe Flash Player Double FreePatch nowKEVEPSS 92.11%Nov 9, 2015
- UnknownAdobe Flash Player, AIR, and AIR SDK Unspecified Arbitrary Code ExecutionPatch nowKEVEPSS 65.96%Nov 2, 2015
- UnknownMicrosoft Windows NULL Pointer DereferencePatch nowKEVEPSS 4.54%Nov 2, 2015
- High7.5Joomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.97%Oct 29, 2015
- UnknownJoomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 85.56%Oct 26, 2015
- Critical10.0Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availab…Check if you run itEPSS 5.61%Oct 21, 2015
- Medium5.0Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown v…Check if you run itEPSS 3.22%Oct 21, 2015
- Critical10.0Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availab…Check if you run itEPSS 5.61%Oct 21, 2015
- Critical10.0Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availab…Check if you run itEPSS 7.51%Oct 21, 2015
- Critical10.0Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availab…Check if you run itEPSS 8.93%Oct 21, 2015
- Medium5.0Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.Check if you run itEPSS 4.08%Oct 21, 2015
Sort