Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary…Check this weekEPSS 13.12%Jul 4, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- Critical9.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.52%Jun 1, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- Medium5.5ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 75.65%May 5, 2016
- UnknownRed Hat JBoss Application Server Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.14%Mar 25, 2016
- UnknownRed Hat jboss_enterprise_brms_platform Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.57%Mar 25, 2016
- UnknownJBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method Security BypassPatch nowKEVEPSS 1.69%Mar 25, 2016
- High7.8Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 37.05%Mar 9, 2016
- Medium4.3Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the o…Check if you run itEPSS 6.23%Feb 25, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…Check if you run itEPSS 9.67%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…Check this weekEPSS 10.57%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…Check this weekEPSS 12.55%Feb 25, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016
- High7.8Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…Check this weekEPSS 20.18%Jun 7, 2015
- Unknownh-fj mt-phpincgi Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.70%May 20, 2015
- Critical9.8Realtek SDK Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.97%May 1, 2015
- Critical9.8Microsoft HTTP.sys Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Apr 14, 2015
- UnknownZTE zxv10_w300_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 12.67%Mar 28, 2015
- Medium6.4java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle atte…Check this weekEPSS 21.04%Feb 16, 2015
- High8.0D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 43.46%Jan 13, 2015
- Unknownwpsymposiumpro wp_symposium Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 58.97%Dec 30, 2014
- Medium4.3Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse…Check if you run itEPSS 8.84%May 31, 2014
- Medium5.0Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, a…Check this weekEPSS 17.58%May 31, 2014
- High7.5Ruby on Rails Directory Traversal VulnerabilityPatch nowKEVEPSS 53.70%May 7, 2014
Sort