Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Microsoft Internet Explorer Messaging API Information Disclosure VulnerabilityPatch nowKEVEPSS 33.33%Apr 12, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.68%Apr 12, 2016
- Medium4.3Microsoft Internet Explorer Information Disclosure VulnerabilityPatch nowKEVEPSS 21.93%Apr 12, 2016
- Medium4.3Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.act…Check this weekEPSS 60.24%Apr 11, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest…Check if you run itEPSS 2.05%Apr 11, 2016
- Low3.1The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving…Check if you run itEPSS 3.41%Apr 8, 2016
- High7.4The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishin…Check if you run itEPSS 4.05%Apr 8, 2016
- UnknownKilling a Zero-Day in the Egg: Adobe CVE-2016-1019 On April 2, 2016, Proofpoint researchers discovered that the Magnitude exploit kit (EK) [1] was successfully exploit…Check this weekEPSS 25.08%Apr 8, 2016
- UnknownKilling a Zero-Day in the Egg: Adobe CVE-2016-1019 On April 2, 2016, Proofpoint researchers discovered that the Magnitude exploit kit (EK) [1] was successfully exploit…Check this weekEPSS 28.33%Apr 8, 2016
- High8.8Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an…Check this weekEPSS 83.26%Apr 7, 2016
- Critical9.8Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF pro…Check if you run itEPSS 2.71%Apr 7, 2016
- Medium5.3Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API toke…Check if you run itEPSS 2.10%Apr 7, 2016
- Medium6.1CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers a…Check if you run itEPSS 1.79%Apr 7, 2016
- Critical9.8The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.Check this weekEPSS 11.84%Apr 7, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 47.25%Apr 7, 2016
- UnknownPatterson Dental Eaglesoft uses a hard-coded database password Overview Patterson Dental Eaglesoft is a dental records software.Check if you run itEPSS 2.43%Apr 6, 2016
- Critical9.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 22.32%Apr 2, 2016
- High8.8Google Chromium V8 Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 48.11%Mar 29, 2016
- UnknownRed Hat JBoss Application Server Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.14%Mar 25, 2016
- UnknownAutoFORM PDM Archive before 7.0 Remote Security BypassPatch nowKEVEPSS 1.53%Mar 25, 2016
- UnknownRed Hat jboss_enterprise_brms_platform Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.57%Mar 25, 2016
- UnknownJBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method Security BypassPatch nowKEVEPSS 1.69%Mar 25, 2016
- UnknownBGP buffer overflow vulnerability CWE-121: Stack-based Buffer Overflow - CVE-2016-2342 Quagga is a software routing suite that implements numerous routing protocols fo…Check this weekEPSS 13.33%Mar 23, 2016
- Medium6.4Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via…Check this weekEPSS 35.53%Mar 22, 2016
- UnknownLinux kernel before 3.16 pipe_read and pipe_write I/O Vector Array OverrunPatch nowKEVEPSS 1.41%Mar 18, 2016
Sort