Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- High7.8The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileg…Check if you run itEPSS 0.47%Jun 3, 2016
- Unknownwp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.89%Jun 3, 2016
- High7.5The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony before 2.3.41, 2.7.x before 2.7.13, 2.…Check if you run itEPSS 1.86%Jun 1, 2016
- High7.5The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when u…Check if you run itEPSS 1.91%Jun 1, 2016
- Critical9.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.37%Jun 1, 2016
- Medium5.3Pulse Connect Secure (PCS) 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors.Check if you run itEPSS 2.10%May 26, 2016
- High8.6The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrat…Check if you run itEPSS 2.24%May 26, 2016
- Medium5.5Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7…Check if you run itEPSS 1.00%May 26, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 b…Check if you run itEPSS 1.10%May 26, 2016
- Medium5.8Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via…Check if you run itEPSS 1.51%May 26, 2016
- Critical10.0Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authenticatio…Check if you run itEPSS 2.49%May 26, 2016
- High7.5Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU cons…Check if you run itEPSS 2.10%May 26, 2016
- UnknownCisco IOS Improper Input ValidationPatch nowKEVEPSS 3.90%May 26, 2016
- Medium5.3Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attac…Check if you run itEPSS 1.93%May 22, 2016
- Medium4.3The save_submission function in mod/assign/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0…Check if you run itEPSS 1.43%May 22, 2016
- Medium4.3lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature i…Check if you run itEPSS 1.71%May 22, 2016
- High8.8Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2…Check if you run itEPSS 0.97%May 22, 2016
- Medium4.3calendar/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 provides calendar-event data wi…Check if you run itEPSS 1.69%May 22, 2016
- Medium4.3The grade-reporting feature in Singleview (aka Single View) in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grad…Check if you run itEPSS 1.61%May 22, 2016
- Medium4.3admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencou…Check if you run itEPSS 1.69%May 22, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the advanced-search feature in mod_data in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.…Check if you run itEPSS 1.47%May 22, 2016
- Medium6.1Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0…Check if you run itEPSS 1.47%May 22, 2016
- Medium4.3user/index.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 grants excessive authorization on the bas…Check if you run itEPSS 1.58%May 22, 2016
- Medium4.3The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node…Check if you run itEPSS 2.31%May 17, 2016
Sort