Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows local users to affect integrity via unknown vectors.Check if you run itEPSS 0.38%Jul 21, 2016
- Low3.4Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality and i…Check if you run itEPSS 0.33%Jul 21, 2016
- High7.5Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.Check if you run itEPSS 3.74%Jul 21, 2016
- High8.1Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x b…Check if you run itEPSS 0.47%Jul 21, 2016
- High7.5Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vecto…Check if you run itEPSS 0.38%Jul 21, 2016
- Medium4.9Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administr…Check if you run itEPSS 3.25%Jul 21, 2016
- Low3.7Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x b…Check if you run itEPSS 4.07%Jul 21, 2016
- Medium5.3CVE-2016-3445 is listed by oracle.Check if you run itEPSS 4.16%Jul 21, 2016
- UnknownMisys FusionCapital Opics Plus contains multiple vulnerabilities Description CVE-2016-5653 - CWE-89: Improper Neutralization of Special Elements used in an SQL Command…Check if you run itEPSS 0.57%Jul 20, 2016
- UnknownMisys FusionCapital Opics Plus contains multiple vulnerabilities CVE-2016-5653 - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injec…Check if you run itEPSS 1.55%Jul 20, 2016
- UnknownMisys FusionCapital Opics Plus contains multiple vulnerabilities CVE-2016-5653 - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injec…Check if you run itEPSS 1.12%Jul 20, 2016
- UnknownRead-only share recipient can restore old versions of fileCheck if you run itEPSS 1.87%Jul 19, 2016
- UnknownEdit permission check not enforced on WebDAV COPY actionCheck if you run itEPSS 2.00%Jul 19, 2016
- UnknownContent-Spoofing in "files" appCheck if you run itEPSS 1.68%Jul 19, 2016
- UnknownLog pollution can potentially lead to local HTML injectionCheck if you run itEPSS 1.49%Jul 19, 2016
- UnknownStored XSS in "gallery" applicationCheck if you run itEPSS 1.37%Jul 19, 2016
- High8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications fr…Check this weekEPSS 50.90%Jul 19, 2016
- High8.1The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTT…Check this weekEPSS 55.72%Jul 19, 2016
- Unknownlibbpg contains a type confusion vulnerability that leads to out of bounds write libbpg is a library for the BPG graphics format.Check if you run itEPSS 2.86%Jul 13, 2016
- High7.8Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP…Check this weekEPSS 26.29%Jul 13, 2016
- High7.8Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Serv…Check this weekEPSS 20.45%Jul 13, 2016
- Medium5.5Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 R…Check this weekEPSS 16.42%Jul 13, 2016
- Medium5.5Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote atta…Check if you run itEPSS 2.56%Jul 12, 2016
- High7.5The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 re…Check this weekEPSS 18.80%Jul 6, 2016
- Medium5.9The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which all…Check this weekEPSS 15.92%Jul 6, 2016
Sort