Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 do not properly implement…Check if you run itEPSS 0.37%Jul 14, 2015
- High8.8Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 52.98%Jul 14, 2015
- Critical9.8Oracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityPatch nowKEVEPSS 25.47%Jul 14, 2015
- Unknownabus tvip_20000-21150_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 38.72%Jul 12, 2015
- Medium6.5The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values durin…Check this weekEPSS 58.21%Jul 9, 2015
- UnknownOracle Java SE 7 through Update 11 and 6 through Update 38 Java Runtime Environment (JRE) VulnerabilityPatch nowKEVEPSS 9.82%Jul 8, 2015
- Medium4.3Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red…Check if you run itEPSS 4.27%Jul 7, 2015
- Medium5.0The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows rem…Check if you run itEPSS 4.33%Jul 6, 2015
- Medium4.3Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information…Check if you run itEPSS 1.70%Jul 6, 2015
- Critical9.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 18.83%Jul 5, 2015
- Critical9.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 87.03%Jul 5, 2015
- Critical9.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 98.62%Jul 5, 2015
- High8.8Microsoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityPatch nowKEVEPSS 86.58%Jul 5, 2015
- High8.8Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 44.73%Jul 5, 2015
- High7.8Microsoft ATM Font Driver Privilege Escalation VulnerabilityPatch nowKEVEPSS 34.88%Jul 5, 2015
- High8.8Microsoft PowerPoint Memory Corruption VulnerabilityPatch nowKEVEPSS 40.12%Jun 30, 2015
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 5.31%Jun 29, 2015
- High7.5The (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified…Check if you run itEPSS 2.58%Jun 24, 2015
- Medium6.8Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote att…Check if you run itEPSS 1.34%Jun 24, 2015
- Critical9.8Adobe Flash Player Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.81%Jun 23, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in Synology DiskStation Manager (DSM) before 5.2-5565 Update 1 allows remote attackers to inject arbitrary web script or HTML…Check if you run itEPSS 1.42%Jun 18, 2015
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 90.14%Jun 16, 2015
- Medium5.0The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attacker…Check this weekEPSS 22.90%Jun 12, 2015
- Medium6.8Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2…Check this weekEPSS 16.73%Jun 12, 2015
- Medium5.0The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote atta…Check this weekEPSS 23.95%Jun 12, 2015
Sort