Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Oracle Fusion Middleware Unspecified VulnerabilityPatch nowKEVEPSS 98.79%Oct 16, 2012
- Medium4.7Oracle Fusion Middleware Unspecified VulnerabilityPatch nowKEVEPSS 4.69%Oct 16, 2012
- Critical9.8Oracle Java SE Sandbox Bypass VulnerabilityPatch nowKEVEPSS 91.25%Oct 16, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3…Check this weekEPSS 16.30%Oct 9, 2012
- Critical9.3Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services o…Check this weekEPSS 22.12%Oct 9, 2012
- Medium4.3Microsoft groove_server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 34.28%Oct 9, 2012
- UnknownApple iOS before 4.2.9 and 4.3.x before 4.3.4 IOMobileFrameBuffer Privilege EscalationPatch nowKEVEPSS 0.37%Oct 9, 2012
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web…Check if you run itEPSS 1.07%Oct 6, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web sc…Check if you run itEPSS 0.93%Sep 25, 2012
- High8.8Adobe Flash Player Integer Overflow VulnerabilityPatch nowKEVEPSS 21.19%Sep 24, 2012
- Unknownmoinmo moinmoin Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 35.10%Sep 22, 2012
- Medium5.5course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks an update capability instead of a reset capability, which allows remot…Check if you run itEPSS 1.13%Sep 19, 2012
- Medium5.0lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remo…Check if you run itEPSS 1.40%Sep 19, 2012
- High8.1Microsoft Internet Explorer Use-After-Free VulnerabilityPatch nowKEVEPSS 80.25%Sep 18, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote attackers to inject arbitrary…Check if you run itEPSS 1.14%Sep 15, 2012
- Medium5.0The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to…Check if you run itEPSS 0.68%Sep 15, 2012
- Medium5.0Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.Check if you run itEPSS 8.14%Sep 5, 2012
- Medium6.8The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perf…Check if you run itEPSS 3.36%Sep 5, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to inject…Check if you run itEPSS 1.49%Sep 5, 2012
- Medium4.3Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote a…Check if you run itEPSS 1.65%Sep 5, 2012
- Low3.5The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain th…Check if you run itEPSS 0.84%Sep 5, 2012
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allow remote authenticated…Check if you run itEPSS 2.03%Sep 5, 2012
- Medium4.6view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserial…Check if you run itEPSS 2.12%Sep 5, 2012
- Medium5.0The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application cras…Check if you run itEPSS 6.95%Sep 5, 2012
- Medium5.0The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-…Check if you run itEPSS 2.30%Sep 4, 2012
Sort