Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users,…Check if you run itEPSS 1.97%Apr 23, 2014
- Medium5.1The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to i…Check if you run itEPSS 5.76%Apr 23, 2014
- UnknownHeap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH)Check if you run itEPSS 6.26%Apr 22, 2014
- Low2.1The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files…Check if you run itEPSS 0.45%Apr 17, 2014
- Medium4.4The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Im…Check if you run itEPSS 0.50%Apr 17, 2014
- Medium6.8CVE-2014-0054 is listed by inventory_high.Check this weekEPSS 91.35%Apr 17, 2014
- Medium5.1Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, in…Check if you run itEPSS 4.71%Apr 16, 2014
- Low3.5Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors…Check if you run itEPSS 3.16%Apr 16, 2014
- Medium6.5Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and…Check if you run itEPSS 3.77%Apr 16, 2014
- Low2.8Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unkn…Check if you run itEPSS 3.44%Apr 16, 2014
- Low2.6Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.Check if you run itEPSS 5.06%Apr 16, 2014
- Low3.5Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors…Check if you run itEPSS 3.27%Apr 16, 2014
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors…Check if you run itEPSS 3.73%Apr 16, 2014
- Medium4.3Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.Check if you run itEPSS 4.08%Apr 16, 2014
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availabil…Check if you run itEPSS 3.29%Apr 16, 2014
- Medium5.0The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion o…Check this weekEPSS 57.99%Apr 15, 2014
- Medium4.0Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data…Check this weekEPSS 34.13%Apr 14, 2014
- High7.1The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 1…Check if you run itEPSS 2.35%Apr 14, 2014
- Medium5.0Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used…Check if you run itEPSS 1.22%Apr 14, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44…Check if you run itEPSS 1.80%Apr 14, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.…Check if you run itEPSS 1.78%Apr 14, 2014
- High7.1Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service (kernel panic and crash) via a large…Check if you run itEPSS 1.55%Apr 14, 2014
- Medium5.0Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 1…Check if you run itEPSS 1.57%Apr 14, 2014
- High7.5An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary fi…Check if you run itEPSS 1.53%Apr 10, 2014
- Low2.1Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remo…Check if you run itEPSS 1.91%Apr 10, 2014
Sort