Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowndynamicpress neosense Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.23%Sep 20, 2016
- High7.5Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityPatch nowKEVEPSS 87.69%Sep 18, 2016
- High7.5The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command lines of failed commands, which might allow context-depend…Check if you run itEPSS 1.12%Sep 18, 2016
- Critical9.8The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of…Check this weekEPSS 44.22%Sep 16, 2016
- High7.5The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, whic…Check this weekEPSS 22.63%Sep 16, 2016
- High7.5The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows rem…Check this weekEPSS 26.56%Sep 16, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via…Check if you run itEPSS 8.23%Sep 14, 2016
- High7.4Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative…Check this weekEPSS 15.28%Sep 14, 2016
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Servic…Check this weekEPSS 54.81%Sep 14, 2016
- Medium6.5The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allow…Check if you run itEPSS 4.90%Sep 14, 2016
- Medium4.3Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 mi…Check this weekEPSS 13.46%Sep 14, 2016
- UnknownDEXIS Imaging Suite 10 contains hard-coded credentials CWE-798: Use of Hard-coded Credentials - CVE-2016-6532 DEXIS Imaging Suite 10 contains several hard-coded databa…Check if you run itEPSS 3.27%Sep 13, 2016
- Medium6.5Microsoft Internet Explorer and Edge Information Disclosure VulnerabilityPatch nowKEVEPSS 26.48%Sep 13, 2016
- Medium6.5PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R…Check if you run itEPSS 0.67%Sep 9, 2016
- Critical9.8J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 bef…Check if you run itEPSS 2.86%Sep 9, 2016
- Medium5.9Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 b…Check if you run itEPSS 1.66%Sep 9, 2016
- Medium6.5Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensiti…Check if you run itEPSS 0.95%Sep 9, 2016
- High7.5Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 before 14.2R6…Check if you run itEPSS 1.39%Sep 9, 2016
- UnknownJoomla! com_facileforms Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Sep 5, 2016
- High7.5The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion bloc…Check this weekEPSS 94.70%Sep 1, 2016
- UnknownvBulletin vBulletin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 70.91%Aug 30, 2016
- Critical9.8D-Link dir-868l_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 11.93%Aug 25, 2016
- High7.8Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution VulnerabilityPatch nowKEVEPSS 22.58%Aug 15, 2016
- High8.8Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityPatch nowKEVEPSS 87.56%Aug 15, 2016
- High8.8Apple iOS Webkit Memory Corruption VulnerabilityPatch nowKEVEPSS 66.79%Aug 15, 2016
Sort