Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote…Check this weekEPSS 19.43%Jan 21, 2014
- Unknownopensuse opensuse Improper Input ValidationPatch nowKEVEPSS 97.55%Jan 2, 2014
- Unknownoptimizepress optimizepress Improper Input ValidationPatch nowKEVEPSS 14.80%Dec 23, 2013
- UnknownMicrosoft Office Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 12.77%Dec 10, 2013
- Unknownbinarymoon timthumb Improper Input ValidationPatch nowKEVEPSS 23.34%Oct 26, 2013
- UnknownParallels Plesk Panel and Small Business Panel ScriptAlias Directive VulnerabilityPatch nowKEVEPSS 31.07%Jun 6, 2013
- UnknownTP-Link tl-wvr300_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.91%Mar 7, 2013
- Unknownmaxtom atomymaxsite Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.02%Jan 8, 2013
- Unknownmoinmo moinmoin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 35.35%Sep 22, 2012
- UnknownSimple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! Remote Code ExecutionPatch nowKEVEPSS 4.84%Aug 31, 2012
- UnknownphpMyAdmin phpMyAdmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 12.88%Jan 17, 2012
- UnknownBaidu Soba Search Bar 'BaiduBar.dll' VulnerabilityPatch nowKEVEPSS 7.32%Sep 1, 2011
- Unknownshttpd shttpd Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 13.26%Aug 5, 2011
- Critical9.8Microsoft Forefront TMG Remote Code Execution VulnerabilityPatch nowKEVEPSS 49.02%Jun 16, 2011
- Unknowncreloaded cre_loaded Improper AuthenticationPatch nowKEVEPSS 1.41%Jun 8, 2011
- UnknownApache subversion NULL Pointer DereferencePatch nowKEVEPSS 8.48%Jun 6, 2011
- UnknownF5 nginx Out-of-bounds WritePatch nowKEVEPSS 75.08%Apr 19, 2011
- UnknownJBoss Direct Request Security BypassPatch nowKEVEPSS 82.26%Apr 19, 2011
- UnknownMicrosoft Windows Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 46.82%Apr 12, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to…Check this weekEPSS 12.23%Jan 11, 2011
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 75.64%Sep 15, 2010
- UnknownThe WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and…Check this weekEPSS 57.54%Aug 4, 2010
- Medium5.0Impact Financials, Inc.Check if you run itEPSS 6.00%Jun 18, 2010
- High7.5Red Hat JBoss Information Disclosure VulnerabilityPatch nowKEVEPSS 61.49%Apr 28, 2010
- Medium5.3Red Hat JBoss Authentication Bypass VulnerabilityPatch nowKEVEPSS 74.72%Apr 28, 2010
Sort