Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Boletín de seguridad: Varias vulnerabilidades de Apache Commons FileUpload afectan a IBM Tivoli Business Service Manager (CVE-2014-0034, CVE-2014-0050, CVE-2013-2186,…Check this weekEPSS 37.17%Jul 4, 2016
- High8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site sc…Check this weekEPSS 25.74%Jul 4, 2016
- High8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary…Check this weekEPSS 12.71%Jul 4, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 1.02%Jul 3, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers…Check if you run itEPSS 0.77%Jul 3, 2016
- High7.5HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service (uninitialized memory access and crash) or poss…Check this weekEPSS 42.82%Jun 30, 2016
- Medium6.5Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block end…Check this weekEPSS 15.68%Jun 30, 2016
- Medium5.5The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for…Check if you run itEPSS 1.24%Jun 20, 2016
- Critical9.8OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer ov…Check this weekEPSS 44.51%Jun 20, 2016
- High7.8SolarWinds Virtualization Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.67%Jun 17, 2016
- Medium5.5Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Autom…Check this weekEPSS 26.49%Jun 16, 2016
- High7.3Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Micros…Check this weekEPSS 14.82%Jun 16, 2016
- Medium5.5Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly…Check this weekEPSS 22.55%Jun 16, 2016
- High7.3Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatib…Check this weekEPSS 16.72%Jun 16, 2016
- High7.8Microsoft Office OLE DLL Side Loading VulnerabilityPatch nowKEVEPSS 43.31%Jun 15, 2016
- Critical9.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 20.05%Jun 15, 2016
- Unknownlibarchive contains a heap-based buffer overflow due to improper input validation CWE-20: Improper Input Validation - CVE-2016-1541 A crafted zip file can provide an i…Check this weekEPSS 10.28%Jun 14, 2016
- UnknownMicrosoft XMP Core Services Improper Input ValidationPatch nowKEVEPSS 15.33%Jun 14, 2016
- High7.5Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityPatch nowKEVEPSS 31.17%Jun 9, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allo…Check if you run itEPSS 1.07%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 44.94%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 16.35%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check if you run itEPSS 8.77%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 13.34%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 17.24%Jun 8, 2016
Sort