Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Microsoft Edge and Internet Explorer Type Confusion VulnerabilityPatch nowKEVEPSS 80.39%Feb 26, 2017
- Critical9.8NETGEAR DGN2200 Remote Code Execution VulnerabilityPatch nowKEVEPSS 68.71%Feb 22, 2017
- UnknownCVE-2017-0888 is listed by Content-Spoofing in "files" app.Check if you run itEPSS 1.54%Feb 5, 2017
- UnknownBypassing quota limitationCheck if you run itEPSS 0.89%Feb 5, 2017
- UnknownDenial of Service attackCheck if you run itEPSS 1.23%Feb 5, 2017
- UnknownError message discloses existence of file in write-only shareCheck if you run itEPSS 0.90%Feb 5, 2017
- UnknownCreation of folders in read-only folders despite lacking permissionsCheck if you run itEPSS 0.67%Feb 5, 2017
- UnknownPermission increase on re-sharing via OCS APICheck if you run itEPSS 0.59%Feb 5, 2017
- High7.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a craftedCheck if you run itEPSS 2.76%Feb 3, 2017
- Critical9.8NETGEAR WNR2000v5 Router Buffer Overflow VulnerabilityPatch nowKEVEPSS 83.33%Jan 29, 2017
- Critical9.0CVE-2017-3310 is listed by Vulnerability in the OJVM component of Oracle Database Server..Check if you run itEPSS 1.62%Jan 27, 2017
- Critical9.8CVE-2017-3248 is listed by Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components)..Check this weekEPSS 97.30%Jan 27, 2017
- High8.8Google Chromium V8 Out-of-Bounds Memory VulnerabilityPatch nowKEVEPSS 34.16%Jan 18, 2017
- High8.1NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityPatch nowKEVEPSS 89.35%Jan 17, 2017
- High7.5Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.99%Jan 17, 2017
- UnknownMozilla Firefox Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 63.94%Jan 9, 2017
- UnknownMozilla seamonkey Improper Input ValidationPatch nowKEVEPSS 41.71%Jan 9, 2017
- UnknownMozilla Firefox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 12.00%Jan 9, 2017
- Critical9.8PHPMailer Command Injection VulnerabilityPatch nowKEVEPSS 99.71%Dec 30, 2016
- High7.1Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from p…Check this weekEPSS 25.08%Dec 20, 2016
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 57.73%Dec 19, 2016
- High8.8NETGEAR Multiple Routers Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 14, 2016
- UnknownEir D1000 Modem TR-064 Remote Command ExecutionPatch nowKEVEPSS 81.90%Dec 14, 2016
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 18.79%Dec 13, 2016
- High7.5Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityPatch nowKEVEPSS 87.36%Nov 29, 2016
Sort