Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zone_id parameter to index.php.Check if you run itEPSS 1.52%Jan 12, 2016
- High8.8Adobe Flash Player and AIR Use-After-Free VulnerabilityPatch nowKEVEPSS 54.54%Jan 11, 2016
- Medium6.3The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and…Check if you run itEPSS 1.33%Jan 9, 2016
- Medium5.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key ExcCheck if you run itEPSS 2.90%Jan 9, 2016
- Medium6.1The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."Check if you run itEPSS 1.43%Jan 8, 2016
- Medium5.4Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbit…Check if you run itEPSS 0.64%Jan 8, 2016
- Medium5.4Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated edi…Check if you run itEPSS 1.14%Jan 8, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 1.43%Jan 8, 2016
- Medium5.4Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenti…Check if you run itEPSS 0.80%Jan 8, 2016
- Medium5.4Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated edit…Check if you run itEPSS 1.14%Jan 8, 2016
- Critical9.8IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Patch nowKEVEPSS 97.76%Jan 2, 2016
- High8.8Adobe Flash Player Integer Overflow VulnerabilityPatch nowKEVEPSS 67.70%Dec 28, 2015
- UnknownJuniper ScreenOS VPN Sessions Unspecified Decryption Attack VulnerabilityPatch nowKEVEPSS 2.55%Dec 23, 2015
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.70%Dec 22, 2015
- Critical9.8Juniper ScreenOS Improper Authentication VulnerabilityPatch nowKEVEPSS 61.14%Dec 19, 2015
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 98.19%Dec 16, 2015
- Critical9.8Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Net…Check this weekEPSS 24.23%Dec 15, 2015
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.33%Dec 8, 2015
- Medium5.0The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain se…Check if you run itEPSS 4.28%Dec 7, 2015
- High7.5Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the (1)…Check if you run itEPSS 2.54%Dec 7, 2015
- Medium6.8Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers t…Check if you run itEPSS 2.71%Dec 7, 2015
- High7.8Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.00%Dec 7, 2015
- Medium4.3ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an i…Check this weekEPSS 13.53%Dec 6, 2015
- Medium5.3The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles…Check this weekEPSS 38.71%Dec 6, 2015
- High7.5crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and applic…Check this weekEPSS 44.02%Dec 6, 2015
Sort