Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- High7.2Cisco Small Business Routers Improper Input Validation VulnerabilityPatch nowKEVEPSS 95.92%Jan 24, 2019
- High7.8Linux Kernel Integer Overflow VulnerabilityPatch nowKEVEPSS 14.69%Sep 25, 2018
- Critical9.3vestacp control_panel Embedded Malicious CodePatch nowKEVEPSS 0.44%Sep 25, 2018
- High7.5A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND oCheck if you run itEPSS 3.75%Jul 19, 2018
- UnknownLinux Kernel ping_unhash Function Privilege EscalationPatch nowKEVEPSS 2.47%Jan 16, 2018
- UnknownLinux Kernel MSM_CAM_IOCTL_SET_MEM_MAP_INFO Privilege EscalationPatch nowKEVEPSS 0.89%Jan 16, 2018
- Medium5.6Intel atom_c Observable DiscrepancyPatch nowKEVEPSS 93.84%Jan 4, 2018
- Medium6.5Vulnerability in the XML Database component of Oracle Database Server.Check if you run itEPSS 1.30%Oct 19, 2017
- High7.8Linux Kernel PIE Stack Buffer Corruption VulnerabilityPatch nowKEVEPSS 10.70%Oct 4, 2017
- UnknownLinux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21 Kernel Module Loader Privilege EscalationPatch nowKEVEPSS 1.57%Jun 20, 2017
- UnknownRed Hat linux Out-of-bounds WritePatch nowKEVEPSS 10.04%Jun 20, 2017
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 25.20%Oct 21, 2016
- High7.0Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 83.52%Oct 18, 2016
- UnknownOracle linux Improper Input ValidationPatch nowKEVEPSS 89.48%Oct 5, 2016
- UnknownGoogle Android Integer Overflow or WraparoundPatch nowKEVEPSS 3.44%Aug 4, 2016
- High8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications fr…Check this weekEPSS 50.90%Jul 19, 2016
- UnknownThe tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointCheck if you run itEPSS 0.37%May 2, 2016
- UnknownLinux kernel before 3.16 pipe_read and pipe_write I/O Vector Array OverrunPatch nowKEVEPSS 1.41%Mar 18, 2016
- High8.8Adobe Flash Player and AIR Integer Overflow VulnerabilityPatch nowKEVEPSS 19.33%Mar 10, 2016
- Medium6.3The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does n…Check this weekEPSS 11.30%Feb 25, 2016
- Medium4.3Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the o…Check if you run itEPSS 6.23%Feb 25, 2016
- Critical10.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confideCheck if you run itEPSS 7.21%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8…Check if you run itEPSS 5.45%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to a…Check if you run itEPSS 4.64%Jan 21, 2016
Sort