Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and ob…Check if you run itEPSS 0.31%Oct 13, 2017
- Medium6.1Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script o…Check if you run itEPSS 1.01%Oct 13, 2017
- High7.8Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system.Check if you run itEPSS 0.46%Oct 13, 2017
- High7.5By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store…Check if you run itEPSS 2.91%Oct 13, 2017
- High8.8J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).Check if you run itEPSS 0.38%Oct 13, 2017
- High7.8Microsoft Office Outlook Security Feature Bypass VulnerabilityPatch nowKEVEPSS 59.63%Oct 13, 2017
- Unknown[CVE-2016-9263] XSF vulnerability in WordPress There is an unpatched vulnerability in latest and older WordPress releases.Check if you run itEPSS 2.17%Oct 13, 2017
- High8.8Adobe Flash Player Type Confusion VulnerabilityPatch nowKEVEPSS 11.21%Oct 10, 2017
- High8.8[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the f…Check if you run itEPSS 1.12%Oct 5, 2017
- High7.8Linux Kernel PIE Stack Buffer Corruption VulnerabilityPatch nowKEVEPSS 10.70%Oct 4, 2017
- Critical9.8Red Hat JBoss Application Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 90.71%Oct 4, 2017
- Critical9.8Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.Check this weekEPSS 86.49%Oct 4, 2017
- High8.1Apache Tomcat Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Oct 3, 2017
- Critical9.8metagauss registrationmagic Deserialization of Untrusted DataPatch nowKEVEPSS 0.71%Oct 2, 2017
- Critical9.8dancoulter flickr_gallery Deserialization of Untrusted DataPatch nowKEVEPSS 0.73%Oct 2, 2017
- Critical9.8wpmudev appointments Deserialization of Untrusted DataPatch nowKEVEPSS 0.73%Oct 2, 2017
- Critical9.8Cisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityPatch nowKEVEPSS 13.77%Sep 28, 2017
- Medium6.5Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service VulnerabilityPatch nowKEVEPSS 2.02%Sep 28, 2017
- High7.5Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service VulnerabilityPatch nowKEVEPSS 7.07%Sep 28, 2017
- High7.5Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityPatch nowKEVEPSS 7.07%Sep 28, 2017
- High7.5Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityPatch nowKEVEPSS 7.07%Sep 28, 2017
- High7.5Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityPatch nowKEVEPSS 7.07%Sep 28, 2017
- Medium6.5Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service VulnerabilityPatch nowKEVEPSS 2.15%Sep 28, 2017
- High7.5Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityPatch nowKEVEPSS 7.07%Sep 28, 2017
- Medium5.9Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.Check if you run itEPSS 1.19%Sep 28, 2017
Sort