Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of…Check this weekEPSS 13.35%Jun 7, 2015
- High7.8Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…Check this weekEPSS 20.18%Jun 7, 2015
- UnknownAdobe Flash Player Access of Resource Using Incompatible Type ('Type Confusion')Patch nowKEVEPSS 70.45%Jun 5, 2015
- Critical9.1Arcserve Unified Data Protection (UDP) Directory Traversal VulnerabilityPatch nowKEVEPSS 63.64%May 29, 2015
- Critical9.8D-Link and TRENDnet Multiple Devices Remote Code Execution VulnerabilityPatch nowKEVEPSS 82.86%May 22, 2015
- Unknownbelkin f5d7230-4 Improper AuthenticationPatch nowKEVEPSS 4.90%May 22, 2015
- Unknownh-fj mt-phpincgi Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.70%May 20, 2015
- Critical10.0ProFTPD Improper Access Control VulnerabilityPatch nowKEVEPSS 99.50%May 18, 2015
- Critical9.3Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."Check this weekEPSS 13.51%May 13, 2015
- High7.8Microsoft Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 48.83%May 13, 2015
- Unknownjquery_file_upload_project jquery_file_upload Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 97.25%May 9, 2015
- Critical9.8Realtek SDK Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.97%May 1, 2015
- Unknowndebian debian_linux Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 16.89%Apr 27, 2015
- High7.5TP-Link Multiple Archer Devices Directory Traversal VulnerabilityPatch nowKEVEPSS 83.95%Apr 21, 2015
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 55.92%Apr 18, 2015
- Critical10.0Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…Check if you run itEPSS 6.41%Apr 16, 2015
- Critical9.8Microsoft HTTP.sys Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Apr 14, 2015
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 97.25%Apr 14, 2015
- Critical9.8Adobe Flash Player Memory Corruption VulnerabilityPatch nowKEVEPSS 73.86%Apr 13, 2015
- High7.8Apple OS X Authentication Bypass VulnerabilityPatch nowKEVEPSS 9.89%Apr 10, 2015
- Medium6.8Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer ov…Check if you run itEPSS 1.45%Apr 1, 2015
- High7.5Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary…Check if you run itEPSS 5.30%Apr 1, 2015
- High7.5Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityPatch nowKEVEPSS 40.38%Apr 1, 2015
- UnknownZTE zxv10_w300_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 12.67%Mar 28, 2015
- Critical9.3Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Wo…Check this weekEPSS 18.75%Mar 11, 2015
Sort