Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5OpenSSL Information Disclosure VulnerabilityPatch nowKEVEPSS 100.00%Apr 7, 2014
- High7.5Boletín de seguridad: Varias vulnerabilidades de Apache Commons FileUpload afectan a IBM Tivoli Business Service Manager (CVE-2014-0034, CVE-2014-0050, CVE-2013-2186,…Check this weekEPSS 83.33%Apr 1, 2014
- Low1.9The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for lo…Check if you run itEPSS 0.84%Mar 25, 2014
- Medium4.0mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to mod…Check if you run itEPSS 1.11%Mar 24, 2014
- Low3.5Cross-site scripting (XSS) vulnerability in the quiz_question_tostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.…Check if you run itEPSS 0.97%Mar 24, 2014
- Medium4.0badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated…Check if you run itEPSS 1.71%Mar 24, 2014
- Medium4.9The time-validation implementation in (1) mod/feedback/complete.php and (2) mod/feedback/complete_guest.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before…Check if you run itEPSS 1.53%Mar 24, 2014
- Medium6.8Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before…Check if you run itEPSS 1.01%Mar 24, 2014
- Medium5.8repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote…Check if you run itEPSS 1.93%Mar 24, 2014
- Medium4.0The identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2…Check if you run itEPSS 1.67%Mar 24, 2014
- Medium4.9The wiki subsystem in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly restrict (1) view and (2) edit access, wh…Check if you run itEPSS 1.48%Mar 24, 2014
- Medium4.9mod/chat/chat_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capabilit…Check if you run itEPSS 1.02%Mar 24, 2014
- Medium4.3CVE-2013-7341 is listed by inventory_high.Check if you run itEPSS 2.40%Mar 24, 2014
- High7.8Microsoft Word Memory Corruption VulnerabilityPatch nowKEVEPSS 77.73%Mar 24, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remot…Check if you run itEPSS 6.90%Mar 20, 2014
- Medium6.1Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 22.56%Mar 18, 2014
- Medium5.0The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (s…Check this weekEPSS 26.65%Mar 18, 2014
- Medium5.0The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA se…Check this weekEPSS 27.50%Mar 18, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject a…Check if you run itEPSS 1.55%Mar 16, 2014
- Medium5.0Apache Struts ParametersInterceptor VulnerabilityPatch nowKEVEPSS 99.39%Mar 11, 2014
- Medium4.3Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors.Check this weekEPSS 26.06%Mar 9, 2014
- Medium4.3Directory traversal vulnerability in the Importers plugin in Atlassian JIRA before 6.0.5 allows remote attackers to create arbitrary files via unspecified vectors.Check if you run itEPSS 2.07%Mar 9, 2014
- Medium6.4The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read syst…Check if you run itEPSS 3.89%Mar 6, 2014
- High7.8The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remote attackers to obt…Check if you run itEPSS 2.34%Mar 2, 2014
- Low3.5Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arb…Check if you run itEPSS 1.41%Mar 1, 2014
Sort