Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Linux Kernel Improper Input Validation VulnerabilityPatch nowKEVEPSS 39.71%Nov 19, 2013
- Medium5.4D-Link DSL-2760U Gateway Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 50.83%Nov 15, 2013
- Medium6.8Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of…Check if you run itEPSS 2.47%Nov 13, 2013
- High8.8Microsoft Windows Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 73.69%Nov 12, 2013
- High7.8Microsoft Graphics Component Memory Corruption VulnerabilityPatch nowKEVEPSS 84.85%Nov 6, 2013
- Critical9.0jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authentic…Check this weekEPSS 10.61%Nov 5, 2013
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter…Check if you run itEPSS 6.13%Nov 2, 2013
- Medium4.6Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check oper…Check this weekEPSS 41.67%Nov 1, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.81%Oct 28, 2013
- Critical10.0Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."Check if you run itEPSS 2.23%Oct 28, 2013
- Critical9.3Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 befo…Check if you run itEPSS 0.78%Oct 28, 2013
- High8.5Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does not properly handle configuration validation err…Check if you run itEPSS 2.17%Oct 28, 2013
- Medium6.8Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors.Check if you run itEPSS 1.26%Oct 28, 2013
- Unknownbinarymoon timthumb Improper Input ValidationPatch nowKEVEPSS 23.34%Oct 26, 2013
- Medium5.0The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary file…Check if you run itEPSS 1.63%Oct 24, 2013
- Medium6.8Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain pr…Check if you run itEPSS 2.02%Oct 21, 2013
- High7.1hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic.Check if you run itEPSS 1.55%Oct 21, 2013
- Critical9.3Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.Check this weekEPSS 11.73%Oct 19, 2013
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HT…Check if you run itEPSS 0.97%Oct 19, 2013
- UnknownvBulletin 4.1 and 5 install/upgrade.php Scripts Remote Security BypassPatch nowKEVEPSS 51.89%Oct 19, 2013
- UnknownMultiple Router xmlset_roodkcableoj28840ybtide User-Agent HTTP Header Authentication BypassPatch nowKEVEPSS 7.68%Oct 19, 2013
- Medium4.3Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MV…Check if you run itEPSS 2.02%Oct 17, 2013
- Medium4.3Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, w…Check if you run itEPSS 2.02%Oct 17, 2013
- Medium6.8Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX…Check if you run itEPSS 4.00%Oct 17, 2013
- Medium5.1J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before…Check if you run itEPSS 0.97%Oct 17, 2013
Sort