Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownJBoss Direct Request Security BypassPatch nowKEVEPSS 82.26%Apr 19, 2011
- High8.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.41%Apr 13, 2011
- UnknownMicrosoft Windows Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 47.10%Apr 12, 2011
- Medium5.0The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for othe…Check if you run itEPSS 8.69%Apr 8, 2011
- Medium5.8CVE-2011-1183 is listed by inventory_critical.Check if you run itEPSS 6.16%Apr 8, 2011
- High7.5webempoweredchurch wec_discussion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.30%Apr 7, 2011
- High7.8Adobe Flash Player Unspecified VulnerabilityPatch nowKEVEPSS 63.51%Mar 15, 2011
- Medium5.8CVE-2011-1419 is listed by inventory_critical.Check if you run itEPSS 6.54%Mar 14, 2011
- Medium5.8Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to…Check if you run itEPSS 6.45%Mar 14, 2011
- UnknownMicrosoft CSS Memory Corruption VulnerabilityPatch nowKEVEPSS 81.66%Mar 8, 2011
- Critical9.3Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.81%Feb 21, 2011
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow rem…Check this weekEPSS 10.01%Feb 19, 2011
- UnknownPivotX before 2.2.4 Password Reset Security BypassPatch nowKEVEPSS 4.02%Feb 18, 2011
- Medium5.0Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows rem…Check if you run itEPSS 7.89%Feb 10, 2011
- Low1.2Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local we…Check if you run itEPSS 1.30%Feb 10, 2011
- Medium5.0Google Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the Mac OS X 10.5 SSL libraries, which allows remote attackers to cause a…Check if you run itEPSS 1.00%Feb 4, 2011
- Medium5.0The sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote attackers to obtain potentially sensitive information about local files vi…Check if you run itEPSS 0.89%Feb 4, 2011
- Medium4.0The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash)…Check if you run itEPSS 3.39%Jan 14, 2011
- Medium4.0MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared…Check if you run itEPSS 3.37%Jan 14, 2011
- Medium4.0MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses th…Check if you run itEPSS 3.39%Jan 14, 2011
- Medium4.0MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement…Check if you run itEPSS 3.39%Jan 14, 2011
- Medium4.0MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) vi…Check if you run itEPSS 2.44%Jan 14, 2011
- Medium4.0MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignm…Check if you run itEPSS 3.39%Jan 14, 2011
- Medium4.0Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server cr…Check if you run itEPSS 2.21%Jan 14, 2011
- Medium5.0MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (s…Check if you run itEPSS 3.05%Jan 14, 2011
Sort