Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMatrixSSL contains multiple vulnerabilities MatrixSSL, version 3.8.5 and earlier, contains heap overflow, out-of-bounds read, and unallocated memory free operation vul…Check if you run itEPSS 6.38%Oct 12, 2016
- UnknownOpenSSH 'AllowTcpForwarding' Port Bounce VulnerabilityPatch nowKEVEPSS 11.27%Oct 12, 2016
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 57.58%Oct 11, 2016
- High7.8Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityPatch nowKEVEPSS 68.47%Oct 11, 2016
- UnknownContent-Spoofing in "dav" appCheck if you run itEPSS 2.08%Oct 10, 2016
- UnknownCVE-2016-9467 is listed by Content-Spoofing in "files" app.Check if you run itEPSS 2.97%Oct 10, 2016
- UnknownReflected XSS in Gallery applicationCheck if you run itEPSS 1.66%Oct 10, 2016
- UnknownStored XSS in CardDAV image exportCheck if you run itEPSS 1.12%Oct 10, 2016
- UnknownImproper authorization check on removing sharesCheck if you run itEPSS 1.62%Oct 10, 2016
- UnknownSMB User Authentication BypassCheck if you run itEPSS 4.09%Oct 10, 2016
- Critical9.1The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12 allow rem…Check if you run itEPSS 3.34%Oct 5, 2016
- High7.5The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit…Check if you run itEPSS 1.35%Oct 5, 2016
- UnknownOracle linux Improper Input ValidationPatch nowKEVEPSS 89.48%Oct 5, 2016
- High7.5The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF…Check if you run itEPSS 5.70%Oct 3, 2016
- Medium5.5The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.Check if you run itEPSS 0.38%Oct 3, 2016
- High7.8The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java pa…Check if you run itEPSS 9.78%Oct 3, 2016
- UnknownAdobe ColdFusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.81%Sep 29, 2016
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 29.97%Sep 29, 2016
- UnknownMicrosoft Internet Explorer Uninitialized Memory CorruptionPatch nowKEVEPSS 26.26%Sep 29, 2016
- UnknownMicrosoft Internet Explorer ASCII encoded Web filter bypassPatch nowKEVEPSS 13.53%Sep 29, 2016
- UnknownWatchGuard RapidStream Appliances Command ExecutionPatch nowKEVEPSS 1.24%Sep 28, 2016
- UnknownFortinet FortiOS Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 49.86%Sep 28, 2016
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Improper AuthenticationPatch nowKEVEPSS 1.99%Sep 28, 2016
- Critical9.8xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namesp…Check if you run itEPSS 8.56%Sep 25, 2016
- Critical9.8MySQL, MariaDB, Percona malloc_lib Remote Root Code ExecutionPatch nowKEVEPSS 67.73%Sep 20, 2016
Sort