Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by usi…Check if you run itEPSS 8.49%May 31, 2014
- Medium4.3Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT styles…Check if you run itEPSS 7.62%May 31, 2014
- Medium4.3Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse…Check if you run itEPSS 8.84%May 31, 2014
- Medium4.3java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly…Check if you run itEPSS 6.91%May 31, 2014
- Medium5.0Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, a…Check this weekEPSS 17.58%May 31, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in the URL downloader repository in repository/url/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6,…Check if you run itEPSS 1.84%May 27, 2014
- Medium4.3enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attac…Check if you run itEPSS 1.87%May 27, 2014
- Medium5.0The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x be…Check if you run itEPSS 2.12%May 27, 2014
- Medium4.0The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anon…Check if you run itEPSS 1.72%May 27, 2014
- Medium6.8login/token.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 creates a MoodleMobile web-service token with an infinite lif…Check if you run itEPSS 2.99%May 27, 2014
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in mod/assign/locallib.php in the Assignment subsystem in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x…Check if you run itEPSS 1.01%May 27, 2014
- Medium6.5CVE-2013-4321 is listed by inventory_high.Check if you run itEPSS 1.12%May 20, 2014
- Medium5.5The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to cre…Check if you run itEPSS 0.98%May 20, 2014
- Medium6.5The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allo…Check if you run itEPSS 1.15%May 20, 2014
- Medium4.0The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticat…Check if you run itEPSS 0.99%May 20, 2014
- Medium5.0SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.Check if you run itEPSS 1.37%May 19, 2014
- Medium4.3The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which…Check if you run itEPSS 3.14%May 16, 2014
- Medium6.4Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in respon…Check if you run itEPSS 2.62%May 16, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold an…Check this weekEPSS 11.09%May 14, 2014
- Critical9.0Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gol…Check this weekEPSS 14.21%May 14, 2014
- UnknownMSCOMCTL ASLR VulnerabilityPatch nowKEVEPSS 10.12%May 14, 2014
- UnknownMicrosoft Internet Explorer Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 20.26%May 13, 2014
- High8.8Microsoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.12%May 13, 2014
- UnknownWindows Shell File Association VulnerabilityPatch nowKEVEPSS 1.77%May 13, 2014
- Medium5.5Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 20.33%May 7, 2014
Sort