Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Word Remote Code Execution VulnerabilityPatch nowKEVEPSS 53.03%Dec 11, 2012
- Medium5.0Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with…Check this weekEPSS 14.78%Dec 3, 2012
- Medium4.0Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service…Check this weekEPSS 13.18%Dec 3, 2012
- Medium6.0MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have ad…Check this weekEPSS 31.66%Dec 3, 2012
- Medium6.5Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users…Check this weekEPSS 21.00%Dec 3, 2012
- Medium6.5Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB…Check this weekEPSS 23.96%Dec 3, 2012
- Medium5.0Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.Check if you run itEPSS 9.59%Nov 30, 2012
- Medium5.0The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, whi…Check this weekEPSS 17.47%Nov 30, 2012
- Medium6.4The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly…Check if you run itEPSS 9.41%Nov 27, 2012
- Medium6.8Red Hat JBoss Application Server Improper AuthenticationPatch nowKEVEPSS 2.94%Nov 23, 2012
- Medium4.0Moodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage capability requirement and read all capability data by visiting the Check…Check if you run itEPSS 1.14%Nov 21, 2012
- Medium6.4The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on readin…Check if you run itEPSS 1.60%Nov 21, 2012
- Medium6.5The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modif…Check if you run itEPSS 1.27%Nov 21, 2012
- Medium4.0The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a d…Check if you run itEPSS 1.12%Nov 21, 2012
- Medium4.0lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a…Check if you run itEPSS 1.14%Nov 21, 2012
- Medium6.5The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of…Check if you run itEPSS 1.26%Nov 21, 2012
- Medium5.0The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (…Check if you run itEPSS 2.37%Nov 20, 2012
- Medium6.4The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via cr…Check if you run itEPSS 3.74%Nov 18, 2012
- Medium5.0The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit persp…Check if you run itEPSS 1.37%Nov 17, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 0.93%Nov 17, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.79%Nov 17, 2012
- Medium5.0The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale n…Check this weekEPSS 12.10%Nov 17, 2012
- Medium5.0The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authen…Check if you run itEPSS 8.77%Nov 17, 2012
- Medium5.0CVE-2012-5885 is listed by inventory_critical.Check if you run itEPSS 8.98%Nov 17, 2012
- Medium5.0java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict…Check if you run itEPSS 8.74%Nov 16, 2012
Sort