Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) via a cra…Check if you run itEPSS 5.26%Apr 14, 2016
- High7.8Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on Share…Check this weekEPSS 21.14%Apr 12, 2016
- High7.8Microsoft Windows CSRSS Security Feature Bypass VulnerabilityPatch nowKEVEPSS 62.82%Apr 12, 2016
- Medium6.5Microsoft Internet Explorer Messaging API Information Disclosure VulnerabilityPatch nowKEVEPSS 33.33%Apr 12, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.68%Apr 12, 2016
- Medium4.3Microsoft Internet Explorer Information Disclosure VulnerabilityPatch nowKEVEPSS 21.93%Apr 12, 2016
- Medium4.3Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.act…Check this weekEPSS 60.24%Apr 11, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest…Check if you run itEPSS 2.05%Apr 11, 2016
- Low3.1The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving…Check if you run itEPSS 3.41%Apr 8, 2016
- High7.4The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishin…Check if you run itEPSS 4.05%Apr 8, 2016
- UnknownKilling a Zero-Day in the Egg: Adobe CVE-2016-1019 On April 2, 2016, Proofpoint researchers discovered that the Magnitude exploit kit (EK) [1] was successfully exploit…Check this weekEPSS 25.08%Apr 8, 2016
- UnknownKilling a Zero-Day in the Egg: Adobe CVE-2016-1019 On April 2, 2016, Proofpoint researchers discovered that the Magnitude exploit kit (EK) [1] was successfully exploit…Check this weekEPSS 28.33%Apr 8, 2016
- High8.8Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an…Check this weekEPSS 83.26%Apr 7, 2016
- Critical9.8Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF pro…Check if you run itEPSS 2.71%Apr 7, 2016
- Medium5.3Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API toke…Check if you run itEPSS 2.10%Apr 7, 2016
- Medium6.1CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers a…Check if you run itEPSS 1.79%Apr 7, 2016
- Critical9.8The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.Check this weekEPSS 11.84%Apr 7, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 47.25%Apr 7, 2016
- UnknownPatterson Dental Eaglesoft uses a hard-coded database password Overview Patterson Dental Eaglesoft is a dental records software.Check if you run itEPSS 2.43%Apr 6, 2016
- Critical9.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 22.32%Apr 2, 2016
- High8.8Google Chromium V8 Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 48.11%Mar 29, 2016
- UnknownRed Hat JBoss Application Server Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.14%Mar 25, 2016
- UnknownAutoFORM PDM Archive before 7.0 Remote Security BypassPatch nowKEVEPSS 1.53%Mar 25, 2016
- UnknownRed Hat jboss_enterprise_brms_platform Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.57%Mar 25, 2016
- UnknownJBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method Security BypassPatch nowKEVEPSS 1.69%Mar 25, 2016
Sort