Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.Check if you run itEPSS 3.94%Jul 17, 2014
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.Check if you run itEPSS 3.51%Jul 17, 2014
- Medium5.4Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D1…Check if you run itEPSS 1.73%Jul 11, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in SRX Web Authentication (webauth) in Juniper Junos 11.4 before 11.4R11, 12.1X44 before 12.1X44-D34, 12.1X45 before 12.1X45-D…Check if you run itEPSS 1.19%Jul 11, 2014
- High7.8Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10,…Check if you run itEPSS 2.72%Jul 11, 2014
- High7.8Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 on SRX Series dev…Check if you run itEPSS 3.37%Jul 11, 2014
- Critical9.0Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10,…Check if you run itEPSS 2.23%Jul 11, 2014
- High7.8Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service (flowd crash) via a…Check if you run itEPSS 1.80%Jul 11, 2014
- UnknownSymantec endpoint_protection_manager Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 28.76%Jul 11, 2014
- UnknownSymantec endpoint_protection_manager Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 67.57%Jul 11, 2014
- Medium6.5IBM InfoSphere BigInsights Invalid Input VulnerabilityPatch nowKEVEPSS 4.77%Jul 7, 2014
- Medium5.8Multiple open redirect vulnerabilities in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites a…Check if you run itEPSS 2.07%Jul 2, 2014
- Medium5.8Multiple open redirect vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and…Check if you run itEPSS 2.07%Jul 2, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers…Check if you run itEPSS 1.66%Jul 2, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script…Check if you run itEPSS 1.66%Jul 2, 2014
- Medium4.3pfSense before 2.1.4, when HTTP is used, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers t…Check if you run itEPSS 2.11%Jul 2, 2014
- Medium6.8Session fixation vulnerability in pfSense before 2.1.4 allows remote attackers to hijack web sessions via a firewall login cookie.Check if you run itEPSS 2.56%Jul 2, 2014
- Medium5.0Multiple directory traversal vulnerabilities in pfSense before 2.1.4 allow (1) remote attackers to read arbitrary .info files via a crafted path in the pkg parameter t…Check if you run itEPSS 3.50%Jul 2, 2014
- Medium5.0Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml parameter.Check if you run itEPSS 2.81%Jul 2, 2014
- Medium6.5pfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the hostname value to diag_dns.php in a Create Alias action, (2) the smart…Check if you run itEPSS 6.97%Jul 2, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the starttime0 parame…Check if you run itEPSS 1.66%Jul 2, 2014
- High7.5The System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system.Check if you run itEPSS 2.99%Jun 9, 2014
- High7.8Linux Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 37.23%Jun 7, 2014
- Medium4.3The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is…Check this weekEPSS 85.78%Jun 5, 2014
- High7.4OpenSSL OpenSSL Inadequate Encryption StrengthPatch nowKEVEPSS 95.33%Jun 5, 2014
Sort