Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead,…Check if you run itEPSS 1.54%Nov 4, 2016
- High8.8Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary cod…Check if you run itEPSS 3.97%Nov 4, 2016
- High8.8Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary c…Check if you run itEPSS 3.82%Nov 4, 2016
- High7.5Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel fun…Check if you run itEPSS 2.25%Oct 28, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 81.14%Oct 28, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 97.25%Oct 28, 2016
- Medium4.3Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via v…Check if you run itEPSS 6.98%Oct 25, 2016
- Medium4.9Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.Check if you run itEPSS 2.02%Oct 25, 2016
- Medium4.9Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vector…Check if you run itEPSS 3.32%Oct 25, 2016
- Medium6.5Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via v…Check if you run itEPSS 6.34%Oct 25, 2016
- Medium6.5Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.Check if you run itEPSS 5.11%Oct 25, 2016
- Medium6.5Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via v…Check if you run itEPSS 3.71%Oct 25, 2016
- Medium6.3Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentia…Check if you run itEPSS 0.40%Oct 25, 2016
- Medium4.4Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vec…Check if you run itEPSS 1.49%Oct 25, 2016
- Medium6.4Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via…Check if you run itEPSS 0.36%Oct 25, 2016
- Critical9.8Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to aff…Check if you run itEPSS 5.08%Oct 25, 2016
- Critical9.8Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confid…Check if you run itEPSS 5.08%Oct 25, 2016
- Medium6.4Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability…Check if you run itEPSS 0.34%Oct 25, 2016
- Medium5.3CVE-2016-5488 is listed by oracle.Check if you run itEPSS 3.52%Oct 25, 2016
- Critical9.8Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers t…Check if you run itEPSS 5.50%Oct 25, 2016
- High8.8Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to aff…Check if you run itEPSS 5.70%Oct 25, 2016
- Medium6.5Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via v…Check if you run itEPSS 6.82%Oct 25, 2016
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 25.20%Oct 21, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 80.97%Oct 21, 2016
- High7.0Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 83.52%Oct 18, 2016
Sort