Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated user…Check if you run itEPSS 3.39%Jan 15, 2014
- Low2.6Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affec…Check if you run itEPSS 4.67%Jan 15, 2014
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availabil…Check if you run itEPSS 3.82%Jan 15, 2014
- High7.1Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a…Check if you run itEPSS 2.34%Jan 15, 2014
- High7.1Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.…Check if you run itEPSS 1.78%Jan 15, 2014
- High7.2Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.…Check if you run itEPSS 0.39%Jan 15, 2014
- High7.1The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12…Check if you run itEPSS 2.32%Jan 15, 2014
- High8.8Adobe Reader and Acrobat Use-After-Free VulnerabilityPatch nowKEVEPSS 39.98%Jan 15, 2014
- High7.8Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gat…Check if you run itEPSS 3.57%Jan 11, 2014
- High7.8Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full pathname in the f parameter.Check if you run itEPSS 2.06%Jan 9, 2014
- Critical10.0webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to ap…Check this weekEPSS 84.57%Jan 9, 2014
- Medium4.3The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and applica…Check this weekEPSS 11.85%Jan 9, 2014
- Unknownopensuse opensuse Improper Input ValidationPatch nowKEVEPSS 97.55%Jan 2, 2014
- Medium5.8The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption cont…Check this weekEPSS 15.35%Jan 1, 2014
- High7.5Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 allow remote attackers to rea…Check this weekEPSS 14.89%Dec 31, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Descri…Check if you run itEPSS 5.41%Dec 31, 2013
- Medium4.9The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated…Check if you run itEPSS 1.02%Dec 23, 2013
- Medium5.8The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 throug…Check if you run itEPSS 1.21%Dec 23, 2013
- Medium5.8Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote at…Check if you run itEPSS 1.21%Dec 23, 2013
- Medium6.5The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated ba…Check if you run itEPSS 1.27%Dec 23, 2013
- Medium4.0The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, wh…Check if you run itEPSS 1.26%Dec 23, 2013
- Medium4.3The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attacker…Check this weekEPSS 21.17%Dec 23, 2013
- Medium4.4VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Admin…Check if you run itEPSS 0.35%Dec 23, 2013
- Unknownoptimizepress optimizepress Improper Input ValidationPatch nowKEVEPSS 14.80%Dec 23, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to injec…Check if you run itEPSS 1.19%Dec 21, 2013
Sort