Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allows remote attackers to inject arbitrary web scri…Check if you run itEPSS 1.35%Dec 21, 2013
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1…Check if you run itEPSS 1.09%Dec 21, 2013
- Unknownopenx openx Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.01%Dec 20, 2013
- High7.5SQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.35%Dec 13, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers…Check if you run itEPSS 8.88%Dec 11, 2013
- Medium6.8Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "Share…Check this weekEPSS 14.52%Dec 11, 2013
- UnknownAdobe Flash Player Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 72.50%Dec 11, 2013
- UnknownvBulletin vBulletin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 27.08%Dec 11, 2013
- Medium5.5Microsoft WinVerifyTrust function Remote Code ExecutionPatch nowKEVEPSS 44.65%Dec 10, 2013
- UnknownMicrosoft Office 2007 SP3 and 2010 SP1 and SP2 HXDS ASLR VulnerabilityPatch nowKEVEPSS 9.93%Dec 10, 2013
- UnknownMicrosoft Office Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 11.69%Dec 10, 2013
- High7.9lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 an…Check if you run itEPSS 0.51%Dec 4, 2013
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 34.65%Nov 27, 2013
- Low3.5Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x…Check if you run itEPSS 1.00%Nov 26, 2013
- Medium6.8Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows rem…Check if you run itEPSS 1.84%Nov 26, 2013
- Low3.5Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote aut…Check if you run itEPSS 1.00%Nov 26, 2013
- Medium5.0lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which al…Check if you run itEPSS 1.54%Nov 26, 2013
- High7.5SQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.22%Nov 23, 2013
- Medium6.4GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors.Check if you run itEPSS 1.24%Nov 20, 2013
- Critical10.0GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity (XXE) issue.Check if you run itEPSS 2.18%Nov 20, 2013
- Medium5.0Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors.Check if you run itEPSS 1.85%Nov 20, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 1.15%Nov 20, 2013
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2) DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitra…Check if you run itEPSS 1.16%Nov 20, 2013
- Medium5.0The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via u…Check if you run itEPSS 1.69%Nov 20, 2013
- Medium5.8The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensiti…Check if you run itEPSS 1.84%Nov 20, 2013
Sort