Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownffmpeg and Libav crossdomain information disclosure When a user opens a maliciously crafted playlist file in ffmpeg, ffmpeg will query a server for remote data.Check this weekEPSS 13.02%Jan 27, 2016
- Unknownffmpeg and Libav crossdomain information disclosure When a user opens a maliciously crafted playlist file in ffmpeg, ffmpeg will query a server for remote data.Check this weekEPSS 14.62%Jan 27, 2016
- Unknownmagento magento Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.74%Jan 22, 2016
- Unknownmagento magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 13.93%Jan 22, 2016
- Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 55.77%Jan 22, 2016
- Critical10.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confideCheck if you run itEPSS 7.21%Jan 21, 2016
- Critical10.0Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integr…Check this weekEPSS 14.71%Jan 21, 2016
- Medium5.8Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote att…Check if you run itEPSS 3.66%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8…Check if you run itEPSS 5.45%Jan 21, 2016
- Medium4.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated…Check if you run itEPSS 3.53%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to a…Check if you run itEPSS 4.64%Jan 21, 2016
- High7.8Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Exc…Check this weekEPSS 22.16%Jan 13, 2016
- Medium4.3Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Wo…Check this weekEPSS 10.92%Jan 13, 2016
- Medium5.4Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and cond…Check if you run itEPSS 5.33%Jan 13, 2016
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 201…Check this weekEPSS 21.10%Jan 13, 2016
- Medium6.1Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and cond…Check if you run itEPSS 6.87%Jan 13, 2016
- Medium5.3swim_team_project swim_team Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 32.48%Jan 12, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zone_id parameter to index.php.Check if you run itEPSS 1.52%Jan 12, 2016
- High8.8Adobe Flash Player and AIR Use-After-Free VulnerabilityPatch nowKEVEPSS 54.54%Jan 11, 2016
- Medium5.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key ExcCheck if you run itEPSS 2.90%Jan 9, 2016
- Critical9.8IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Patch nowKEVEPSS 97.76%Jan 2, 2016
- High8.8Adobe Flash Player Integer Overflow VulnerabilityPatch nowKEVEPSS 67.70%Dec 28, 2015
- UnknownJuniper ScreenOS VPN Sessions Unspecified Decryption Attack VulnerabilityPatch nowKEVEPSS 2.55%Dec 23, 2015
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.70%Dec 22, 2015
- Critical9.8Juniper ScreenOS Improper Authentication VulnerabilityPatch nowKEVEPSS 61.40%Dec 19, 2015
Sort