Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTCP/IP Elevation of Privilege VulnerabilityPatch nowKEVEPSS 22.84%Aug 4, 2016
- UnknownMozilla Firefox Improper Privilege ManagementPatch nowKEVEPSS 83.51%Aug 4, 2016
- UnknownMozilla Firefox Improper Privilege ManagementPatch nowKEVEPSS 82.21%Aug 4, 2016
- High7.5The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows re…Check this weekEPSS 29.98%Aug 1, 2016
- High8.8Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly h…Check if you run itEPSS 2.25%Jul 23, 2016
- Critical9.0Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality,…Check if you run itEPSS 3.32%Jul 21, 2016
- Medium6.7Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, in…Check if you run itEPSS 0.42%Jul 21, 2016
- Medium4.4Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows local users to affect integrity via unknown vectors.Check if you run itEPSS 0.38%Jul 21, 2016
- Low3.4Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality and i…Check if you run itEPSS 0.33%Jul 21, 2016
- High7.5Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.Check if you run itEPSS 3.74%Jul 21, 2016
- UnknownMisys FusionCapital Opics Plus contains multiple vulnerabilities Description CVE-2016-5653 - CWE-89: Improper Neutralization of Special Elements used in an SQL Command…Check if you run itEPSS 0.57%Jul 20, 2016
- UnknownMisys FusionCapital Opics Plus contains multiple vulnerabilities CVE-2016-5653 - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injec…Check if you run itEPSS 1.55%Jul 20, 2016
- UnknownMisys FusionCapital Opics Plus contains multiple vulnerabilities CVE-2016-5653 - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injec…Check if you run itEPSS 1.12%Jul 20, 2016
- UnknownRead-only share recipient can restore old versions of fileCheck if you run itEPSS 1.87%Jul 19, 2016
- UnknownEdit permission check not enforced on WebDAV COPY actionCheck if you run itEPSS 2.00%Jul 19, 2016
- UnknownContent-Spoofing in "files" appCheck if you run itEPSS 1.68%Jul 19, 2016
- UnknownLog pollution can potentially lead to local HTML injectionCheck if you run itEPSS 1.49%Jul 19, 2016
- UnknownStored XSS in "gallery" applicationCheck if you run itEPSS 1.37%Jul 19, 2016
- High8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications fr…Check this weekEPSS 50.90%Jul 19, 2016
- High8.1The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTT…Check this weekEPSS 55.72%Jul 19, 2016
- Unknownlibbpg contains a type confusion vulnerability that leads to out of bounds write libbpg is a library for the BPG graphics format.Check if you run itEPSS 2.86%Jul 13, 2016
- High8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site sc…Check this weekEPSS 25.74%Jul 4, 2016
- High8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary…Check this weekEPSS 12.71%Jul 4, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 1.02%Jul 3, 2016
- Medium6.5Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block end…Check this weekEPSS 15.68%Jun 30, 2016
Sort