Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via ve…Check if you run itEPSS 1.19%Apr 21, 2016
- Medium5.1Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x b…Check if you run itEPSS 1.53%Apr 21, 2016
- Medium6.1Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x b…Check if you run itEPSS 1.57%Apr 21, 2016
- Critical9.8Oracle WebLogic ClassFilter.class ServerChannelInputStream Bypass Java DeserializationPatch nowKEVEPSS 62.92%Apr 21, 2016
- Critical9.8Oracle Java SE and JRockit Unspecified VulnerabilityPatch nowKEVEPSS 92.33%Apr 21, 2016
- High7.6Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2…Check if you run itEPSS 1.40%Apr 15, 2016
- High7.5Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets.Check if you run itEPSS 1.36%Apr 15, 2016
- Medium5.9Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes…Check if you run itEPSS 0.66%Apr 15, 2016
- High7.8CVE-2016-1271 is listed by inventory_high.Check if you run itEPSS 0.32%Apr 15, 2016
- High7.5The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 bef…Check if you run itEPSS 1.26%Apr 15, 2016
- High7.5Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R9, 13.2X…Check if you run itEPSS 1.87%Apr 15, 2016
- Medium6.7Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 be…Check if you run itEPSS 0.22%Apr 15, 2016
- High8.8Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12…Check if you run itEPSS 1.73%Apr 15, 2016
- UnknownThe networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, whCheck if you run itEPSS 1.78%Apr 14, 2016
- High7.5The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Securit…Check if you run itEPSS 2.61%Apr 14, 2016
- High8.6XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) via a cra…Check if you run itEPSS 5.26%Apr 14, 2016
- Critical9.8Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negat…Check if you run itEPSS 7.87%Apr 13, 2016
- Medium6.5Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to ca…Check if you run itEPSS 4.03%Apr 13, 2016
- Medium6.5Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a cr…Check if you run itEPSS 2.52%Apr 13, 2016
- Medium6.5Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.Check if you run itEPSS 2.66%Apr 13, 2016
- High7.8Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on Share…Check this weekEPSS 21.14%Apr 12, 2016
- High7.8Microsoft Windows CSRSS Security Feature Bypass VulnerabilityPatch nowKEVEPSS 62.82%Apr 12, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the URLDecoder function in JRE before 1.8, as used in Apache Struts 2.x before 2.3.28, when using a single byte page encodi…Check this weekEPSS 11.56%Apr 12, 2016
- Medium6.1Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site sc…Check if you run itEPSS 7.78%Apr 12, 2016
- High8.8Apache Struts 2.x before 2.3.28 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation.Check if you run itEPSS 8.88%Apr 12, 2016
Sort