Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remot…Check if you run itEPSS 1.21%Sep 16, 2013
- Medium5.8repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server…Check if you run itEPSS 0.60%Sep 16, 2013
- Critical9.8HP Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 79.47%Sep 13, 2013
- High7.5SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0_DELETE_DERIVATION_TABLE."Check if you run itEPSS 2.28%Sep 12, 2013
- Critical9.3CVE-2013-3858 is listed by inventory_critical.Check this weekEPSS 21.03%Sep 11, 2013
- Critical9.3Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 201…Check this weekEPSS 21.03%Sep 11, 2013
- Critical9.3CVE-2013-3849 is listed by inventory_critical.Check this weekEPSS 21.03%Sep 11, 2013
- Critical9.3CVE-2013-3848 is listed by inventory_critical.Check this weekEPSS 21.14%Sep 11, 2013
- Critical9.3CVE-2013-3847 is listed by inventory_critical.Check this weekEPSS 20.97%Sep 11, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a…Check this weekEPSS 65.81%Sep 11, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web script or…Check this weekEPSS 22.26%Sep 11, 2013
- Critical10.0The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the En…Check this weekEPSS 30.20%Sep 11, 2013
- Critical9.3Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2…Check this weekEPSS 28.87%Sep 11, 2013
- Medium5.0Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remot…Check this weekEPSS 76.33%Sep 11, 2013
- Critical9.4Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors.Check if you run itEPSS 3.69%Sep 10, 2013
- High7.5Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.Check if you run itEPSS 3.09%Sep 10, 2013
- Medium4.3VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a…Check if you run itEPSS 1.10%Sep 4, 2013
- Critical9.8Adobe Reader and Acrobat Memory Corruption VulnerabilityPatch nowKEVEPSS 78.91%Aug 30, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 1.16%Aug 23, 2013
- High7.5SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.21%Aug 23, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary we…Check if you run itEPSS 1.28%Aug 20, 2013
- High7.5SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.35%Aug 20, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote attackers to…Check if you run itEPSS 2.15%Aug 20, 2013
- Medium5.0HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers…Check if you run itEPSS 3.59%Aug 19, 2013
- High7.5SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.35%Aug 16, 2013
Sort