Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, whi…Check this weekEPSS 79.07%Dec 5, 2016
- High7.5Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityPatch nowKEVEPSS 87.36%Nov 29, 2016
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityPatch nowKEVEPSS 24.23%Nov 22, 2016
- High7.5Siemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.61%Nov 18, 2016
- Medium5.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but…Check if you run itEPSS 2.94%Nov 16, 2016
- Critical9.8Jenkins Jenkins Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')Patch nowKEVEPSS 96.94%Nov 16, 2016
- UnknownUnix Distributions Account Credentials VulnerabilityPatch nowKEVEPSS 53.34%Nov 11, 2016
- High8.8Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via u…Check this weekEPSS 11.89%Nov 10, 2016
- High8.8The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users…Check this weekEPSS 11.86%Nov 10, 2016
- Medium6.5Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Service…Check this weekEPSS 17.57%Nov 10, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified…Check if you run itEPSS 8.19%Nov 10, 2016
- High8.8Microsoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privilege…Check this weekEPSS 11.99%Nov 10, 2016
- High8.8Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, a…Check this weekEPSS 11.89%Nov 10, 2016
- Medium5.5Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Servic…Check this weekEPSS 16.48%Nov 10, 2016
- High7.8Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via…Check this weekEPSS 20.72%Nov 10, 2016
- High7.8Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Excel for Mac 2011, Word 2016 for Mac, Office Compatibility Pa…Check this weekEPSS 22.29%Nov 10, 2016
- Medium6.5Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on Sha…Check this weekEPSS 22.38%Nov 10, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 80.00%Nov 9, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 82.78%Nov 9, 2016
- High8.8Microsoft Windows Open Type Font Remote Code Execution VulnerabilityPatch nowKEVEPSS 64.59%Nov 8, 2016
- Medium6.1Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead,…Check if you run itEPSS 1.54%Nov 4, 2016
- High8.8Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary cod…Check if you run itEPSS 3.97%Nov 4, 2016
- High8.8Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary c…Check if you run itEPSS 3.82%Nov 4, 2016
- High7.5Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel fun…Check if you run itEPSS 2.25%Oct 28, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 81.14%Oct 28, 2016
Sort