Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request…Check if you run itEPSS 9.15%Dec 19, 2012
- Medium4.3org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass…Check this weekEPSS 11.97%Dec 19, 2012
- Medium5.4A flaw was found in OpenStack Keystone.Check if you run itEPSS 2.05%Dec 18, 2012
- High7.8Microsoft Word Remote Code Execution VulnerabilityPatch nowKEVEPSS 53.03%Dec 11, 2012
- Medium5.0Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with…Check this weekEPSS 14.78%Dec 3, 2012
- Medium4.0Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service…Check this weekEPSS 13.18%Dec 3, 2012
- Medium6.0MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have ad…Check this weekEPSS 31.66%Dec 3, 2012
- Medium6.5Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users…Check this weekEPSS 21.00%Dec 3, 2012
- Medium6.5Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB…Check this weekEPSS 23.96%Dec 3, 2012
- Medium5.0Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.Check if you run itEPSS 9.59%Nov 30, 2012
- Medium6.8Red Hat JBoss Application Server Improper AuthenticationPatch nowKEVEPSS 2.94%Nov 23, 2012
- Medium5.0The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale n…Check this weekEPSS 12.10%Nov 17, 2012
- Medium5.0The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authen…Check if you run itEPSS 8.77%Nov 17, 2012
- Medium5.0CVE-2012-5885 is listed by inventory_critical.Check if you run itEPSS 8.98%Nov 17, 2012
- Medium5.0java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict…Check if you run itEPSS 8.74%Nov 16, 2012
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 5.22%Nov 16, 2012
- UnknownAdobe Flash Player Arbitrary Code ExecutionPatch nowKEVEPSS 4.94%Oct 18, 2012
- UnknownAdobe Reader CoolType.dll Remote Code ExecutionPatch nowKEVEPSS 16.30%Oct 18, 2012
- UnknownAdobe Acrobat and Reader Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.21%Oct 18, 2012
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 67.89%Oct 18, 2012
- UnknownMS Paint Integer Overflow VulnerabilityPatch nowKEVEPSS 48.33%Oct 18, 2012
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 35.70%Oct 18, 2012
- UnknownMicrosoft Office Excel Record Integer OverflowPatch nowKEVEPSS 36.90%Oct 18, 2012
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 31.81%Oct 18, 2012
- UnknownMicrosoft Windows Mitigating Factors for GDI Integer OverflowPatch nowKEVEPSS 31.12%Oct 18, 2012
Sort