Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Apple iOS Memory Corruption VulnerabilityPatch nowKEVEPSS 23.63%Aug 15, 2016
- Medium5.5Apple iOS Information Disclosure VulnerabilityPatch nowKEVEPSS 33.35%Aug 15, 2016
- High7.8Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted…Check this weekEPSS 49.83%Aug 9, 2016
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 20.47%Aug 9, 2016
- Medium6.1CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response spl…Check if you run itEPSS 2.07%Aug 8, 2016
- High7.8Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x befor…Check this weekEPSS 19.49%Aug 8, 2016
- High7.5The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to…Check this weekEPSS 58.57%Aug 7, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django befor…Check if you run itEPSS 5.54%Aug 5, 2016
- High7.8Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to…Check if you run itEPSS 0.45%Aug 5, 2016
- Medium5.9Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system wit…Check if you run itEPSS 2.11%Aug 5, 2016
- UnknownGoogle Android Integer Overflow or WraparoundPatch nowKEVEPSS 3.47%Aug 4, 2016
- UnknownTCP/IP Elevation of Privilege VulnerabilityPatch nowKEVEPSS 22.84%Aug 4, 2016
- UnknownMozilla Firefox Improper Privilege ManagementPatch nowKEVEPSS 83.51%Aug 4, 2016
- UnknownMozilla Firefox Improper Privilege ManagementPatch nowKEVEPSS 82.21%Aug 4, 2016
- High7.5The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows re…Check this weekEPSS 29.98%Aug 1, 2016
- High8.8Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly h…Check if you run itEPSS 2.25%Jul 23, 2016
- Low3.7Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x b…Check if you run itEPSS 4.34%Jul 21, 2016
- Medium4.9Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x b…Check if you run itEPSS 3.85%Jul 21, 2016
- Medium5.3Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x b…Check if you run itEPSS 5.68%Jul 21, 2016
- Critical9.0Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality,…Check if you run itEPSS 3.32%Jul 21, 2016
- Critical9.8CVE-2016-3586 is listed by oracle.Check this weekEPSS 20.02%Jul 21, 2016
- Medium6.5Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x b…Check this weekEPSS 10.44%Jul 21, 2016
- Critical9.8CVE-2016-3510 is listed by oracle.Check this weekEPSS 91.40%Jul 21, 2016
- Critical9.8Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality,…Check if you run itEPSS 8.86%Jul 21, 2016
- Medium6.7Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, in…Check if you run itEPSS 0.42%Jul 21, 2016
Sort