Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishin…Check if you run itEPSS 2.31%May 17, 2016
- Medium4.3Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check.Check if you run itEPSS 2.39%May 17, 2016
- Medium6.5Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.Check if you run itEPSS 2.19%May 17, 2016
- Medium4.3Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing p…Check if you run itEPSS 1.93%May 17, 2016
- Medium4.3Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the "full name."Check if you run itEPSS 2.29%May 17, 2016
- Medium4.3Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.Check if you run itEPSS 2.12%May 17, 2016
- Medium5.9Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, whi…Check if you run itEPSS 7.14%May 16, 2016
- UnknownAdobe Reader and Acrobat Launch File Warning VulnerabilityPatch nowKEVEPSS 73.62%May 16, 2016
- Unknownimlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse.Check if you run itEPSS 2.53%May 13, 2016
- Unknownhancom hangul_word_processor Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.49%May 13, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- High8.8The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remot…Check this weekEPSS 15.70%May 11, 2016
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbi…Check this weekEPSS 19.38%May 11, 2016
- High7.8Microsoft Windows Media Center Remote Code Execution VulnerabilityPatch nowKEVEPSS 69.85%May 10, 2016
- High7.5Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 94.06%May 10, 2016
- Critical9.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 94.27%May 8, 2016
- Medium5.5ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 75.65%May 5, 2016
- Medium5.5ImageMagick Arbitrary File Deletion VulnerabilityPatch nowKEVEPSS 75.31%May 5, 2016
- High8.2The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from…Check this weekEPSS 23.95%May 5, 2016
- High7.5The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to ca…Check this weekEPSS 29.21%May 5, 2016
- Critical9.8The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underf…Check this weekEPSS 77.91%May 5, 2016
- Medium5.9CVE-2016-2107 is listed by inventory_critical.Check this weekEPSS 89.06%May 5, 2016
- High7.5Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial o…Check this weekEPSS 27.26%May 5, 2016
- High7.5Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of…Check this weekEPSS 39.65%May 5, 2016
- High7.5crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to…Check if you run itEPSS 3.14%May 5, 2016
Sort