Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownThe networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, whCheck if you run itEPSS 1.78%Apr 14, 2016
- High7.8Microsoft Windows CSRSS Security Feature Bypass VulnerabilityPatch nowKEVEPSS 62.94%Apr 12, 2016
- Medium6.5Microsoft Internet Explorer Messaging API Information Disclosure VulnerabilityPatch nowKEVEPSS 33.33%Apr 12, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.73%Apr 12, 2016
- Medium4.3Microsoft Internet Explorer Information Disclosure VulnerabilityPatch nowKEVEPSS 22.01%Apr 12, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 47.25%Apr 7, 2016
- Critical9.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 22.32%Apr 2, 2016
- High8.8Google Chromium V8 Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 48.11%Mar 29, 2016
- UnknownRed Hat JBoss Application Server Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.14%Mar 25, 2016
- UnknownAutoFORM PDM Archive before 7.0 Remote Security BypassPatch nowKEVEPSS 1.53%Mar 25, 2016
- UnknownRed Hat jboss_enterprise_brms_platform Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.57%Mar 25, 2016
- UnknownJBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method Security BypassPatch nowKEVEPSS 1.69%Mar 25, 2016
- UnknownLinux kernel before 3.16 pipe_read and pipe_write I/O Vector Array OverrunPatch nowKEVEPSS 1.41%Mar 18, 2016
- UnknownMicrosoft infopath Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 23.90%Mar 12, 2016
- High8.8Adobe Flash Player and AIR Integer Overflow VulnerabilityPatch nowKEVEPSS 19.33%Mar 10, 2016
- High7.8Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 37.05%Mar 9, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.68%Mar 8, 2016
- UnknownJustSystems Remote Code ExecutionPatch nowKEVEPSS 5.33%Mar 8, 2016
- Medium6.3The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does n…Check this weekEPSS 11.30%Feb 25, 2016
- High8.8The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes,…Check this weekEPSS 13.08%Feb 25, 2016
- Medium4.3Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the o…Check if you run itEPSS 6.23%Feb 25, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…Check if you run itEPSS 9.67%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…Check this weekEPSS 10.57%Feb 25, 2016
- Medium5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security…Check this weekEPSS 18.38%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…Check this weekEPSS 12.55%Feb 25, 2016
Sort