Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended…Check if you run itEPSS 6.56%Sep 13, 2017
- UnknownNETGEAR wnr2000v5_firmware Improper Input ValidationPatch nowKEVEPSS 77.43%Sep 13, 2017
- Medium5.3Jenkins before 1.586 does not set the HttpOnly flag in a Set-Cookie header for session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote att…Check if you run itEPSS 2.72%Sep 12, 2017
- Medium5.3Jenkins before 1.586 does not set the secure flag on session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to capture cookies…Check if you run itEPSS 2.72%Sep 12, 2017
- High7.8Microsoft .NET Framework Remote Code Execution VulnerabilityPatch nowKEVEPSS 88.70%Sep 12, 2017
- High8.8Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allo…Check if you run itEPSS 2.31%Sep 11, 2017
- Critical9.8SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter.Check if you run itEPSS 1.31%Sep 11, 2017
- Medium5.4Cross-site scripting (XSS) vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to…Check if you run itEPSS 0.72%Sep 11, 2017
- High7.5There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter.Check if you run itEPSS 1.16%Sep 11, 2017
- Medium5.4Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Compa…Check if you run itEPSS 0.72%Sep 11, 2017
- Critical9.8SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter.Check if you run itEPSS 1.31%Sep 11, 2017
- High7.5In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a…Check if you run itEPSS 5.46%Sep 9, 2017
- High7.5Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service VulnerabilityPatch nowKEVEPSS 6.16%Sep 7, 2017
- Medium6.1In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page.Check this weekEPSS 23.57%Sep 7, 2017
- Critical9.8XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.Check this weekEPSS 13.47%Sep 6, 2017
- High8.1CVE-2015-5948 is listed by Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code..Check if you run itEPSS 4.48%Sep 6, 2017
- High8.1SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code.Check if you run itEPSS 2.74%Sep 6, 2017
- High7.2SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authent…Check if you run itEPSS 1.41%Aug 31, 2017
- High8.8diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 a…Check if you run itEPSS 1.31%Aug 29, 2017
- High7.5Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.Check if you run itEPSS 9.06%Aug 29, 2017
- High7.5There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by tri…Check if you run itEPSS 3.94%Aug 29, 2017
- Medium4.9Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation (DSM) before 6.1.1-15088 allows remote authenticated attacker…Check if you run itEPSS 1.43%Aug 28, 2017
- Critical9.8Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityPatch nowKEVEPSS 77.68%Aug 23, 2017
- Critical9.8Telerik UI for ASP.NET AJAX Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 84.17%Aug 23, 2017
- Medium5.3HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.Check if you run itEPSS 2.29%Aug 22, 2017
Sort