Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.Check if you run itEPSS 0.78%Apr 10, 2017
- Medium5.4Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.Check if you run itEPSS 0.71%Apr 10, 2017
- Critical9.8Apache Tomcat Remote Code Execution VulnerabilityPatch nowKEVEPSS 90.34%Apr 6, 2017
- High8.8Zyxel EMG2926 Routers Command Injection VulnerabilityPatch nowKEVEPSS 32.98%Apr 6, 2017
- Medium6.1A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ` ` view could redirect to any other domain, aka an…Check if you run itEPSS 1.85%Apr 4, 2017
- Medium6.1Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL.Check if you run itEPSS 2.40%Apr 4, 2017
- High7.5technicolor tc7200_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 17.71%Apr 3, 2017
- UnknownApple iOS before 10.3 "Quick Look" Call TriggerPatch nowKEVEPSS 1.46%Apr 1, 2017
- Critical9.8Multi-Router Looking Glass (MRLG) Buffer Overflow VulnerabilityPatch nowKEVEPSS 28.98%Mar 31, 2017
- UnknownGIGABYTE gb-bsi7h-6500_firmware Insufficient Verification of Data AuthenticityPatch nowKEVEPSS 1.58%Mar 31, 2017
- UnknownGIGABYTE gb-bsi7h-6500_firmware Protection Mechanism FailurePatch nowKEVEPSS 5.57%Mar 31, 2017
- High7.5A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a f…Check this weekEPSS 19.34%Mar 29, 2017
- Medium5.4In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.Check if you run itEPSS 0.82%Mar 29, 2017
- Critical9.8Microsoft Windows Server Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.82%Mar 26, 2017
- Medium6.1In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.Check if you run itEPSS 1.05%Mar 26, 2017
- Medium6.1In Moodle 3.x, XSS can occur via evidence of prior learning.Check if you run itEPSS 1.05%Mar 26, 2017
- Medium5.3In Moodle 3.2.x, global search displays user names for unauthenticated users.Check if you run itEPSS 1.58%Mar 26, 2017
- Critical9.8In Moodle 2.x and 3.x, SQL injection can occur via user preferences.Check this weekEPSS 14.53%Mar 26, 2017
- Critical9.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.Check this weekEPSS 26.85%Mar 23, 2017
- High7.5QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/…Check if you run itEPSS 6.44%Mar 23, 2017
- High7.8The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on Debian jessie, before 6.0.35-1ubuntu3.9 on Ubuntu…Check if you run itEPSS 0.74%Mar 23, 2017
- High7.8The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomc…Check if you run itEPSS 0.75%Mar 23, 2017
- UnknownPotential client side exploitation Adobe Flash MP4 parsing OOB Memory Access M1 (CVE-2017-2984)Check this weekEPSS 18.22%Mar 21, 2017
- UnknownVulnerability Note VU#214283 - Commvault Edge contains a buffer overflow vulnerability Overview Commvault Edge, version 11 SP6 ( ), is vulnerable to a stack-based buff…Check this weekEPSS 21.39%Mar 21, 2017
- High7.1The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted…Check this weekEPSS 39.63%Mar 20, 2017
Sort