Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 71.15%Jul 26, 2011
- UnknownApple iOS before 4.2.9 and 4.3.x before 4.3. CoreGraphics Remote Code ExecutionPatch nowKEVEPSS 6.25%Jul 19, 2011
- Unknownjustsystems ichitaro Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 5.56%Jul 18, 2011
- Medium4.4Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain…Check if you run itEPSS 0.70%Jul 14, 2011
- UnknownAncillary Function Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 8.42%Jun 30, 2011
- Low1.9Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encount…Check if you run itEPSS 0.67%Jun 29, 2011
- UnknownJava Runtime Environment (JRE) Deployment Component Unspecified VulnerabilityPatch nowKEVEPSS 83.04%Jun 20, 2011
- Critical9.8Microsoft Forefront TMG Remote Code Execution VulnerabilityPatch nowKEVEPSS 49.02%Jun 16, 2011
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 86.42%Jun 16, 2011
- High7.8Android OS Privilege Escalation VulnerabilityPatch nowKEVEPSS 41.37%Jun 9, 2011
- Unknowncreloaded cre_loaded Improper AuthenticationPatch nowKEVEPSS 1.41%Jun 8, 2011
- UnknownAdobe Flash Player Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.55%Jun 6, 2011
- Unknownplone.app.users in Plone 4.0 and 4.1 Remote Authenticated Account ManipulationPatch nowKEVEPSS 2.35%Jun 6, 2011
- UnknownApache subversion NULL Pointer DereferencePatch nowKEVEPSS 8.48%Jun 6, 2011
- UnknownOracle Java SE and Java for Business New Java Plug-in Component VulnerabilityPatch nowKEVEPSS 80.74%May 24, 2011
- UnknownOracle Java SE and Java for Business Sound Component VulnerabilityPatch nowKEVEPSS 77.72%May 24, 2011
- Medium4.3CVE-2011-1582 is listed by inventory_critical.Check if you run itEPSS 6.02%May 20, 2011
- UnknownObject Management Memory Corruption VulnerabilityPatch nowKEVEPSS 40.88%May 16, 2011
- UnknownMicrosoft Internet Explorer 6 and 7 Layouts Handling Memory Corruption VulnerabilityPatch nowKEVEPSS 21.91%May 16, 2011
- UnknownAdobe Flash Player Improper Input ValidationPatch nowKEVEPSS 5.11%May 12, 2011
- Medium6.8Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact…Check if you run itEPSS 0.68%May 3, 2011
- UnknownMicrosoft Office Improper Input ValidationPatch nowKEVEPSS 52.03%Apr 21, 2011
- UnknownLinux Kernel Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 4.89%Apr 19, 2011
- UnknownF5 nginx Out-of-bounds WritePatch nowKEVEPSS 75.08%Apr 19, 2011
- UnknownFCKEditor Multiple File Extension Handling PHP File Upload VulnerabilityPatch nowKEVEPSS 8.00%Apr 19, 2011
Sort