Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityPatch nowKEVEPSS 11.10%Jul 17, 2017
- High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityPatch nowKEVEPSS 10.85%Jul 17, 2017
- High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityPatch nowKEVEPSS 10.85%Jul 17, 2017
- High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityPatch nowKEVEPSS 44.96%Jul 17, 2017
- High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityPatch nowKEVEPSS 70.35%Jul 17, 2017
- High8.8A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to ex…Check if you run itEPSS 2.28%Jul 17, 2017
- High7.5The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet.Check if you run itEPSS 1.30%Jul 17, 2017
- High7.5A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured.Check if you run itEPSS 1.95%Jul 17, 2017
- Medium5.9An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG).Check if you run itEPSS 1.10%Jul 17, 2017
- Critical9.8CVE-2017-2345 is listed by inventory_high.Check if you run itEPSS 3.63%Jul 17, 2017
- High7.8A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow.Check if you run itEPSS 0.48%Jul 17, 2017
- Critical9.8The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user pr…Check if you run itEPSS 2.70%Jul 17, 2017
- High8.1MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established.Check if you run itEPSS 0.57%Jul 17, 2017
- High8.8An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS i…Check if you run itEPSS 0.36%Jul 17, 2017
- High7.5Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart.Check if you run itEPSS 1.30%Jul 17, 2017
- High7.5On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting…Check if you run itEPSS 1.57%Jul 17, 2017
- Medium5.3When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect passwor…Check if you run itEPSS 0.88%Jul 17, 2017
- High7.8An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user.Check if you run itEPSS 0.44%Jul 17, 2017
- High7.8A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute code with root privileges.Check if you run itEPSS 0.43%Jul 17, 2017
- Critical9.8A specific device configuration can result in a commit failure condition.Check if you run itEPSS 1.82%Jul 17, 2017
- Critical9.8The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key.Check if you run itEPSS 1.72%Jul 17, 2017
- High7.5When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potent…Check if you run itEPSS 9.51%Jul 13, 2017
- Critical9.1Apache HTTP Server Improper Input ValidationPatch nowKEVEPSS 56.77%Jul 13, 2017
- High7.5When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack.Check this weekEPSS 10.55%Jul 13, 2017
- Medium5.9If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server…Check if you run itEPSS 9.84%Jul 13, 2017
Sort