Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compile…Check if you run itEPSS 1.28%Jan 5, 2017
- Medium6.2authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive privat…Check if you run itEPSS 1.10%Jan 5, 2017
- High7.0sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via…Check if you run itEPSS 4.24%Jan 5, 2017
- High7.3Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging…Check this weekEPSS 37.43%Jan 5, 2017
- Critical9.8PHPMailer Command Injection VulnerabilityPatch nowKEVEPSS 99.71%Dec 30, 2016
- High7.5An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5.Check if you run itEPSS 4.91%Dec 29, 2016
- Critical9.8An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7.Check if you run itEPSS 1.39%Dec 29, 2016
- Medium5.4Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject arbitrary w…Check if you run itEPSS 1.13%Dec 29, 2016
- High7.7VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup,…Check if you run itEPSS 1.88%Dec 29, 2016
- High7.1CVE-2016-7291 is listed by inventory_critical.Check this weekEPSS 23.41%Dec 20, 2016
- High7.1CVE-2016-7290 is listed by inventory_critical.Check this weekEPSS 23.41%Dec 20, 2016
- High7.1Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from p…Check this weekEPSS 25.41%Dec 20, 2016
- High7.1Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2…Check this weekEPSS 22.77%Dec 20, 2016
- High7.1Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Serv…Check this weekEPSS 21.66%Dec 20, 2016
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 58.84%Dec 19, 2016
- UnknownCVE-2001-0540 The Terminal Server in Microsoft Windows is vulnerable to a denial of service attack, caused by a memory leak.Check this weekEPSS 71.25%Dec 14, 2016
- High8.8NETGEAR Multiple Routers Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 14, 2016
- UnknownEpubCheck 4.0.1 contains a XML external entity processing vulnerability EpubCheck is a tool to validate that EPUB files follow the proper format.Check if you run itEPSS 1.26%Dec 14, 2016
- UnknownEir D1000 Modem TR-064 Remote Command ExecutionPatch nowKEVEPSS 81.90%Dec 14, 2016
- High7.0mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5…Check if you run itEPSS 2.97%Dec 13, 2016
- High7.0Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x…Check if you run itEPSS 4.31%Dec 13, 2016
- Medium5.5The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by lever…Check if you run itEPSS 0.31%Dec 13, 2016
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 19.08%Dec 13, 2016
- High8.1Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks…Check if you run itEPSS 6.07%Dec 9, 2016
- Critical9.8Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Ora…Check if you run itEPSS 5.14%Dec 9, 2016
Sort