Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote att…Check this weekEPSS 13.60%Oct 17, 2013
- Medium4.9Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrit…Check if you run itEPSS 2.20%Oct 16, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated user…Check if you run itEPSS 3.12%Oct 16, 2013
- Medium5.0Oracle GlassFish Server, JDeveloper, and WebLogic Server Components Remote Confidentiality VulnerabilityPatch nowKEVEPSS 32.44%Oct 16, 2013
- Medium6.8Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."Check this weekEPSS 33.96%Oct 9, 2013
- Critical9.3Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatib…Check this weekEPSS 27.40%Oct 9, 2013
- Medium5.5Microsoft Silverlight Information Disclosure VulnerabilityPatch nowKEVEPSS 67.14%Oct 9, 2013
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 48.19%Oct 9, 2013
- High8.8Microsoft Internet Explorer Use-After-Free VulnerabilityPatch nowKEVEPSS 77.31%Oct 9, 2013
- Medium4.3The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP…Check if you run itEPSS 2.31%Oct 4, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows…Check if you run itEPSS 2.89%Oct 4, 2013
- Medium6.5The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer derefe…Check this weekEPSS 10.11%Oct 1, 2013
- Medium6.0MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users t…Check this weekEPSS 44.54%Oct 1, 2013
- Medium4.0Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user comma…Check this weekEPSS 11.41%Oct 1, 2013
- High7.5SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header.Check if you run itEPSS 1.35%Sep 30, 2013
- Critical10.0Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.Check if you run itEPSS 8.40%Sep 30, 2013
- Medium5.8Apache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted action: prefix.Check if you run itEPSS 6.52%Sep 30, 2013
- Medium5.0The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a den…Check if you run itEPSS 2.73%Sep 23, 2013
- High8.8Microsoft Internet Explorer Resource Management Errors VulnerabilityPatch nowKEVEPSS 87.64%Sep 18, 2013
- Medium5.0Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors.Check if you run itEPSS 2.06%Sep 16, 2013
- Medium5.0Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a f…Check if you run itEPSS 3.27%Sep 16, 2013
- Low3.3lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symli…Check if you run itEPSS 0.33%Sep 16, 2013
- Low1.9runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file…Check if you run itEPSS 0.34%Sep 16, 2013
- High7.5badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge, which allows remote a…Check if you run itEPSS 2.10%Sep 16, 2013
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to…Check this weekEPSS 21.86%Sep 16, 2013
Sort