Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2016-8497Open the advisoryMay 27, 2017
- UnknownCVE-2016-8496Open the advisoryMay 27, 2017
- Medium5.5CVE-2017-8542 is listed by inventory_critical.Check if you run itEPSS 6.02%May 26, 2017
- High7.8CVE-2017-8541 is listed by inventory_critical.Check this weekEPSS 48.12%May 26, 2017
- Medium5.5CVE-2017-8539 is listed by inventory_critical.Check if you run itEPSS 6.02%May 26, 2017
- High7.8CVE-2017-8538 is listed by inventory_critical.Check this weekEPSS 50.00%May 26, 2017
- Medium5.5CVE-2017-8537 is listed by inventory_critical.Check this weekEPSS 16.83%May 26, 2017
- Medium5.5CVE-2017-8536 is listed by inventory_critical.Check this weekEPSS 16.83%May 26, 2017
- Medium5.5CVE-2017-8535 is listed by inventory_critical.Check this weekEPSS 16.83%May 26, 2017
- High7.8Microsoft Malware Protection Engine Improper Restriction of Operations VulnerabilityPatch nowKEVEPSS 71.87%May 26, 2017
- Critical9.8NETGEAR Multiple Devices Buffer Overflow VulnerabilityPatch nowKEVEPSS 45.75%May 26, 2017
- High7.5Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to…Check if you run itEPSS 2.80%May 25, 2017
- Critical9.6Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack.Check if you run itEPSS 2.56%May 25, 2017
- High8.8When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default…Check if you run itEPSS 1.47%May 25, 2017
- Critical9.8The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.Check if you run itEPSS 5.77%May 23, 2017
- Critical9.8aviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 23, 2017
- High7.5libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c.Check if you run itEPSS 4.63%May 18, 2017
- High7.5libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c.Check if you run itEPSS 4.63%May 18, 2017
- High7.5libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow.Check if you run itEPSS 4.85%May 18, 2017
- High7.5A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801.Check if you run itEPSS 3.16%May 18, 2017
- High7.5A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for…Check if you run itEPSS 4.21%May 18, 2017
- Critical9.8Joomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.83%May 17, 2017
- Medium4.3In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.Check if you run itEPSS 0.52%May 15, 2017
- Medium5.3In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.Check if you run itEPSS 1.05%May 15, 2017
- Medium6.3In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.Check if you run itEPSS 1.23%May 15, 2017
Sort