Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.8Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attac…Check this weekEPSS 94.65%Jul 20, 2013
- Critical9.8Apache Struts Improper Input Validation VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2013
- Medium6.4PeopleSoft Enterprise PeopleTools Component Unspecified VulnerabilityPatch nowKEVEPSS 7.09%Jul 17, 2013
- Low3.5Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availabil…Check if you run itEPSS 2.76%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity…Check if you run itEPSS 2.67%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect…Check if you run itEPSS 2.85%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unkn…Check if you run itEPSS 2.39%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated user…Check if you run itEPSS 3.01%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated user…Check if you run itEPSS 3.27%Jul 17, 2013
- Medium5.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unkn…Check if you run itEPSS 3.82%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unkn…Check if you run itEPSS 2.73%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availabil…Check if you run itEPSS 3.12%Jul 17, 2013
- Medium4.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors…Check if you run itEPSS 3.12%Jul 17, 2013
- Critical9.3Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences,…Check this weekEPSS 13.83%Jul 16, 2013
- Critical9.3Apache Struts Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.21%Jul 16, 2013
- Medium5.0The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk…Check this weekEPSS 13.72%Jul 15, 2013
- Medium5.0CVE-2013-4690 is listed by inventory_high.Check if you run itEPSS 2.07%Jul 11, 2013
- High7.8flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of serv…Check if you run itEPSS 1.91%Jul 11, 2013
- High7.8flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways (ALGs) are e…Check if you run itEPSS 2.61%Jul 11, 2013
- High7.1The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and…Check if you run itEPSS 2.32%Jul 11, 2013
- Critical10.0Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Port…Check if you run itEPSS 7.62%Jul 11, 2013
- High7.8flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows…Check if you run itEPSS 2.75%Jul 11, 2013
- Medium4.3mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of serv…Check this weekEPSS 29.48%Jul 10, 2013
- High8.1CVE-2013-2115 is listed by inventory_high.Check this weekEPSS 74.64%Jul 10, 2013
- Critical9.3Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams…Check this weekEPSS 73.70%Jul 10, 2013
Sort