Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumption) via a crafted DIAG request, aka SAP Securi…Check if you run itEPSS 2.50%Jul 12, 2017
- High7.5SAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Jul 12, 2017
- Medium6.1Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could…Check if you run itEPSS 3.17%Jul 11, 2017
- High8.8Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint s…Check if you run itEPSS 5.38%Jul 11, 2017
- Medium6.1CVE-2017-8560 is listed by inventory_critical.Check if you run itEPSS 3.42%Jul 11, 2017
- Medium6.1CVE-2017-8559 is listed by inventory_critical.Check if you run itEPSS 3.42%Jul 11, 2017
- High7.8CVE-2017-8501 is listed by Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory…Check this weekEPSS 22.50%Jul 11, 2017
- High7.8Microsoft Office Remote Code Execution VulnerabilityPatch nowKEVEPSS 89.89%Jul 11, 2017
- Critical9.8Apache Struts 1 Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.91%Jul 10, 2017
- High8.8In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote…Check if you run itEPSS 1.00%Jul 4, 2017
- Critical9.8In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances beca…Check if you run itEPSS 3.41%Jul 4, 2017
- Medium6.5In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization modul…Check if you run itEPSS 3.59%Jul 4, 2017
- Critical9.8Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness VulnerabilityPatch nowKEVEPSS 75.10%Jul 3, 2017
- Critical9.8PHPUnit Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jun 27, 2017
- UnknownCVE-2016-8498Open the advisoryJun 26, 2017
- High8.8Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the…Check if you run itEPSS 1.46%Jun 25, 2017
- UnknownDrupal Drupal Core Files or Directories Accessible to External PartiesPatch nowKEVEPSS 1.95%Jun 21, 2017
- Critical9.8apache2 CVE-2017-7679Check this weekEPSS 39.34%Jun 20, 2017
- High7.5apache2 CVE-2017-7668Patch nowKEVEPSS 57.47%Jun 20, 2017
- Critical9.8apache2 CVE-2017-3169Check this weekEPSS 19.95%Jun 20, 2017
- Critical9.8apache2 CVE-2017-3167Check this weekEPSS 20.23%Jun 20, 2017
- Unknowncpanel cgiecho Use of Externally-Controlled Format StringPatch nowKEVEPSS 2.56%Jun 20, 2017
- UnknownOracle Sun Systems Products Suite Solaris Kernel RPC VulnerabilityPatch nowKEVEPSS 22.53%Jun 20, 2017
- UnknownOracle Sun Systems Products Suite Solaris Common Desktop Environment (CDE) VulnerabilityPatch nowKEVEPSS 5.34%Jun 20, 2017
- UnknownProFTPD Response API Remote Code ExecutionPatch nowKEVEPSS 12.63%Jun 20, 2017
Sort