Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 95.34%Jan 14, 2015
- High8.0D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityPatch nowKEVEPSS 43.46%Jan 13, 2015
- High7.8Microsoft Windows TS WebProxy Directory Traversal VulnerabilityPatch nowKEVEPSS 75.78%Jan 13, 2015
- Medium5.0Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service…Check this weekEPSS 57.36%Jan 9, 2015
- Medium5.0The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certific…Check this weekEPSS 22.34%Jan 9, 2015
- Medium5.0OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat…Check this weekEPSS 15.03%Jan 9, 2015
- Medium5.0The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-E…Check if you run itEPSS 6.24%Jan 9, 2015
- Medium5.0OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application cra…Check this weekEPSS 22.13%Jan 9, 2015
- Medium5.0The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might…Check this weekEPSS 21.87%Jan 9, 2015
- Medium4.3The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgPatch nowKEVEPSS 98.69%Jan 9, 2015
- High7.5run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.Check if you run itEPSS 2.79%Jan 6, 2015
- High7.5The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or…Check if you run itEPSS 1.50%Jan 4, 2015
- Medium4.3The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using…Check if you run itEPSS 1.72%Jan 4, 2015
- Unknownwpsymposiumpro wp_symposium Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 58.97%Dec 30, 2014
- Medium4.3mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization pr…Check this weekEPSS 22.02%Dec 29, 2014
- Medium5.0The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a d…Check if you run itEPSS 1.46%Dec 25, 2014
- Medium5.0CVE-2014-3569 is listed by inventory_critical.Check this weekEPSS 19.52%Dec 24, 2014
- Medium5.0Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular…Check if you run itEPSS 6.50%Dec 16, 2014
- Medium5.0The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segm…Check if you run itEPSS 2.90%Dec 16, 2014
- Medium5.0The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of servic…Check this weekEPSS 10.78%Dec 15, 2014
- UnknownThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress Admin AJAX Security BypassPatch nowKEVEPSS 75.56%Dec 15, 2014
- Critical9.3Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibilit…Check this weekEPSS 19.38%Dec 11, 2014
- Low3.5Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to red…Check if you run itEPSS 7.07%Dec 11, 2014
- Medium4.3CVE-2014-6326 is listed by inventory_critical.Check if you run itEPSS 8.72%Dec 11, 2014
- Medium4.3CVE-2014-6325 is listed by inventory_critical.Check if you run itEPSS 8.72%Dec 11, 2014
Sort