Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Ruby on Rails Directory Traversal VulnerabilityPatch nowKEVEPSS 53.70%May 7, 2014
- Medium4.3The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certai…Check this weekEPSS 40.31%May 6, 2014
- Unknownteethgrinder.co.uk open_flash_chart Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 75.84%May 6, 2014
- High7.5Apache commons_beanutils Improper Input ValidationPatch nowKEVEPSS 99.03%Apr 30, 2014
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 94.49%Apr 29, 2014
- Medium6.8dompdf dompdf Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 39.37%Apr 28, 2014
- UnknownCVE-2012-4410Open the advisoryApr 27, 2014
- Critical9.8Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 82.68%Apr 27, 2014
- Critical9.8InduSoft Web Studio NTWebServer Directory Traversal VulnerabilityPatch nowKEVEPSS 74.68%Apr 24, 2014
- Critical10.0The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x…Check if you run itEPSS 4.84%Apr 23, 2014
- Medium5.0The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users,…Check if you run itEPSS 1.97%Apr 23, 2014
- Medium5.1The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to i…Check if you run itEPSS 5.76%Apr 23, 2014
- UnknownHeap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH)Check if you run itEPSS 6.26%Apr 22, 2014
- Medium6.8CVE-2014-0054 is listed by inventory_high.Check this weekEPSS 91.35%Apr 17, 2014
- Medium5.1Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, in…Check if you run itEPSS 4.71%Apr 16, 2014
- Low3.5Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors…Check if you run itEPSS 3.16%Apr 16, 2014
- Medium6.5Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and…Check if you run itEPSS 3.77%Apr 16, 2014
- Low2.8Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unkn…Check if you run itEPSS 3.44%Apr 16, 2014
- Low2.6Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.Check if you run itEPSS 5.06%Apr 16, 2014
- Low3.5Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors…Check if you run itEPSS 3.27%Apr 16, 2014
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors…Check if you run itEPSS 3.73%Apr 16, 2014
- Medium4.3Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.Check if you run itEPSS 4.08%Apr 16, 2014
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availabil…Check if you run itEPSS 3.29%Apr 16, 2014
- Medium5.0The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion o…Check this weekEPSS 57.99%Apr 15, 2014
- Medium4.0Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data…Check this weekEPSS 34.13%Apr 14, 2014
Sort