Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8NETGEAR Multiple WAP Devices Command Injection VulnerabilityPatch nowKEVEPSS 98.32%Apr 21, 2017
- High8.8Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier all…Check if you run itEPSS 1.13%Apr 20, 2017
- Medium4.3The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to…Check if you run itEPSS 1.17%Apr 20, 2017
- Medium4.3The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authentic…Check if you run itEPSS 1.55%Apr 20, 2017
- Medium5.3Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions.Check if you run itEPSS 1.80%Apr 20, 2017
- Medium6.5The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit pro…Check if you run itEPSS 1.28%Apr 20, 2017
- High8.8squirrelmail squirrelmail Improper Input ValidationPatch nowKEVEPSS 32.16%Apr 20, 2017
- Critical9.8In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted…Check this weekEPSS 89.36%Apr 17, 2017
- Critical9.8In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing.Check if you run itEPSS 7.75%Apr 17, 2017
- High7.5In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connecti…Check if you run itEPSS 8.28%Apr 17, 2017
- Critical9.1While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, an…Check this weekEPSS 13.23%Apr 17, 2017
- High7.5A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, whe…Check this weekEPSS 16.84%Apr 17, 2017
- UnknownCVE-2017-3136: An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;" A query with a specific set of characte…Check this weekEPSS 11.09%Apr 16, 2017
- High8.8mantisbt mantisbt Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 91.20%Apr 16, 2017
- Medium6.5Symantec messaging_gateway Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 53.98%Apr 14, 2017
- High7.5mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveragi…Check if you run itEPSS 2.49%Apr 14, 2017
- Critical9.8eclipse jetty Improper Access ControlPatch nowKEVEPSS 6.54%Apr 13, 2017
- Medium5.4Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web A…Check if you run itEPSS 4.34%Apr 12, 2017
- Critical9.8The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, whic…Check this weekEPSS 13.74%Apr 11, 2017
- High8.8Microsoft Internet Explorer Privilege Escalation VulnerabilityPatch nowKEVEPSS 22.33%Apr 11, 2017
- High7.8Microsoft Office and WordPad Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.50%Apr 11, 2017
- UnknownAllegroSoft RomPager Crafted Cookie Privilege EscalationPatch nowKEVEPSS 74.01%Apr 11, 2017
- Critical9.8The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitr…Check this weekEPSS 16.24%Apr 10, 2017
- Critical9.8Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV por…Check if you run itEPSS 2.23%Apr 10, 2017
- High8.8Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.Check if you run itEPSS 0.91%Apr 10, 2017
Sort