Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated…Check if you run itEPSS 2.58%Mar 1, 2014
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 19.41%Feb 28, 2014
- Medium4.3org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in…Check if you run itEPSS 9.89%Feb 26, 2014
- Medium4.3Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an un…Check if you run itEPSS 9.49%Feb 26, 2014
- Medium4.3CVE-2013-4322 is listed by inventory_critical.Check if you run itEPSS 9.10%Feb 26, 2014
- Medium5.8CVE-2013-4286 is listed by inventory_critical.Check this weekEPSS 16.21%Feb 26, 2014
- Medium6.5Microsoft Internet Explorer Information Disclosure VulnerabilityPatch nowKEVEPSS 50.21%Feb 26, 2014
- High8.8Adobe Flash Player Double Free VulnerablityPatch nowKEVEPSS 24.82%Feb 20, 2014
- Low2.1Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file.Check if you run itEPSS 0.68%Feb 15, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 through 7.02, an…Check if you run itEPSS 1.16%Feb 14, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote attackers to…Check if you run itEPSS 1.16%Feb 14, 2014
- Medium5.0Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors.Check if you run itEPSS 1.57%Feb 14, 2014
- Medium5.0Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors.Check if you run itEPSS 2.09%Feb 14, 2014
- Medium5.0The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.Check if you run itEPSS 1.37%Feb 14, 2014
- High8.8Microsoft Internet Explorer Use-After-Free VulnerabilityPatch nowKEVEPSS 85.12%Feb 14, 2014
- Unknownkennziffer statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.69%Feb 12, 2014
- UnknownVSAVB7RT ASLR VulnerabilityPatch nowKEVEPSS 13.77%Feb 12, 2014
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 38.70%Feb 11, 2014
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 11.29%Feb 11, 2014
- UnknownRoundcube Webmail Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.29%Feb 7, 2014
- Medium4.9A flaw was found in Spacewalk-backend.Check if you run itEPSS 1.67%Feb 5, 2014
- Medium5.4A flaw was found in Spacewalk.Check if you run itEPSS 1.54%Feb 5, 2014
- Medium5.4A flaw was found in Spacewalk and Red Hat Network Satellite.Check if you run itEPSS 1.47%Feb 5, 2014
- Medium5.5A flaw was found in Spacewalk and Red Hat Network Satellite.Check if you run itEPSS 2.04%Feb 5, 2014
- Medium6.5A flaw was found in Spacewalk, as used in Red Hat Network Satellite.Check if you run itEPSS 1.46%Feb 5, 2014
Sort