Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 24.28%Feb 10, 2016
- UnknownRed Hat data_grid Deserialization of Untrusted DataPatch nowKEVEPSS 85.56%Jan 28, 2016
- Unknownmagento magento Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.74%Jan 22, 2016
- Unknownmagento magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.93%Jan 22, 2016
- Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 55.77%Jan 22, 2016
- High7.5CVE-2016-0577 is listed by oracle.Check if you run itEPSS 2.77%Jan 21, 2016
- High7.5CVE-2016-0574 is listed by oracle.Check if you run itEPSS 2.77%Jan 21, 2016
- High7.5Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect conf…Check if you run itEPSS 2.80%Jan 21, 2016
- High7.5Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect conf…Check if you run itEPSS 2.63%Jan 21, 2016
- Critical10.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confideCheck if you run itEPSS 7.21%Jan 21, 2016
- Critical10.0Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integr…Check this weekEPSS 14.71%Jan 21, 2016
- Medium5.8Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote att…Check if you run itEPSS 3.66%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8…Check if you run itEPSS 5.45%Jan 21, 2016
- Medium4.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated…Check if you run itEPSS 3.53%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to a…Check if you run itEPSS 4.64%Jan 21, 2016
- High7.8Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Exc…Check this weekEPSS 22.16%Jan 13, 2016
- Medium4.3Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Wo…Check this weekEPSS 10.92%Jan 13, 2016
- Medium5.4Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and cond…Check if you run itEPSS 5.33%Jan 13, 2016
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 201…Check this weekEPSS 21.10%Jan 13, 2016
- Medium6.1Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and cond…Check if you run itEPSS 6.87%Jan 13, 2016
- Medium5.3swim_team_project swim_team Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 32.48%Jan 12, 2016
- High8.8Adobe Flash Player and AIR Use-After-Free VulnerabilityPatch nowKEVEPSS 54.54%Jan 11, 2016
- Medium5.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key ExcCheck if you run itEPSS 2.90%Jan 9, 2016
- Critical9.8IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Patch nowKEVEPSS 97.76%Jan 2, 2016
- High8.8Adobe Flash Player Integer Overflow VulnerabilityPatch nowKEVEPSS 67.70%Dec 28, 2015
Sort