Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to cre…Check if you run itEPSS 0.98%May 20, 2014
- Medium6.5The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allo…Check if you run itEPSS 1.15%May 20, 2014
- Medium4.0The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticat…Check if you run itEPSS 0.99%May 20, 2014
- Medium5.0SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.Check if you run itEPSS 1.37%May 19, 2014
- Medium4.3The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which…Check if you run itEPSS 3.14%May 16, 2014
- Medium6.4Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in respon…Check if you run itEPSS 2.62%May 16, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold an…Check this weekEPSS 11.09%May 14, 2014
- Critical9.0Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gol…Check this weekEPSS 14.21%May 14, 2014
- UnknownMSCOMCTL ASLR VulnerabilityPatch nowKEVEPSS 10.12%May 14, 2014
- UnknownMicrosoft Internet Explorer Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 20.26%May 13, 2014
- High8.8Microsoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.12%May 13, 2014
- UnknownWindows Shell File Association VulnerabilityPatch nowKEVEPSS 1.77%May 13, 2014
- Medium5.8CVE-2014-0116 is listed by inventory_high.Check if you run itEPSS 6.57%May 8, 2014
- Medium5.5Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 20.33%May 7, 2014
- High7.5Ruby on Rails Directory Traversal VulnerabilityPatch nowKEVEPSS 53.70%May 7, 2014
- Medium4.3The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certai…Check this weekEPSS 40.31%May 6, 2014
- Unknownteethgrinder.co.uk open_flash_chart Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 75.84%May 6, 2014
- High7.5Apache commons_beanutils Improper Input ValidationPatch nowKEVEPSS 99.03%Apr 30, 2014
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 94.49%Apr 29, 2014
- Medium6.8dompdf dompdf Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 39.37%Apr 28, 2014
- Critical10.0CVE-2014-3007 is listed by inventory_high.Check this weekEPSS 10.36%Apr 27, 2014
- UnknownCVE-2012-4410Open the advisoryApr 27, 2014
- Critical9.8Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 82.68%Apr 27, 2014
- Critical9.8InduSoft Web Studio NTWebServer Directory Traversal VulnerabilityPatch nowKEVEPSS 74.68%Apr 24, 2014
- Critical10.0The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x…Check if you run itEPSS 4.84%Apr 23, 2014
Sort