Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related…Check if you run itEPSS 2.69%Oct 15, 2014
- Medium4.1Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability vi…Check if you run itEPSS 0.34%Oct 15, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 2.13%Oct 15, 2014
- Medium4.0Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary f…Check if you run itEPSS 2.47%Oct 15, 2014
- Critical9.3Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services…Check this weekEPSS 17.46%Oct 15, 2014
- Critical9.3Adobe Flash Player Integer Overflow or WraparoundPatch nowKEVEPSS 91.28%Oct 15, 2014
- Critical10.0Adobe Flash Player Arbitrary Code ExecutionPatch nowKEVEPSS 6.19%Oct 15, 2014
- Low3.4The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to…Check this weekEPSS 100.00%Oct 15, 2014
- High7.8Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3…Check if you run itEPSS 2.93%Oct 14, 2014
- High7.5Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.…Check if you run itEPSS 2.51%Oct 14, 2014
- High7.8Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 before D70, 12.3 before R7, 1…Check if you run itEPSS 1.82%Oct 14, 2014
- Medium6.8The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 befor…Check if you run itEPSS 2.04%Oct 14, 2014
- High7.8Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D6…Check if you run itEPSS 1.90%Oct 14, 2014
- High8.8Adobe Flash Player Dereferenced Pointer VulnerabilityPatch nowKEVEPSS 20.37%Oct 14, 2014
- High8.8Microsoft Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 59.85%Oct 14, 2014
- High8.8Microsoft Internet Explorer Privilege Escalation VulnerabilityPatch nowKEVEPSS 47.13%Oct 14, 2014
- High7.8Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityPatch nowKEVEPSS 81.63%Oct 14, 2014
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 86.65%Oct 14, 2014
- Medium5.0The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a d…Check this weekEPSS 13.45%Oct 10, 2014
- Critical9.8Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.32%Oct 7, 2014
- Medium5.0Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-dev23 before 1.5.4 allow remote attackers to cause a denial of serv…Check if you run itEPSS 3.81%Sep 30, 2014
- High8.8GNU Bash OS Command Injection VulnerabilityPatch nowKEVEPSS 99.67%Sep 30, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 99.94%Sep 24, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Sep 24, 2014
- Critical9.8QNAP QTS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 56.85%Sep 22, 2014
Sort