Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownelegantthemes divi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.89%Sep 3, 2014
- Unknownthemepunch slider_revolution Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.49%Sep 3, 2014
- High8.4Code Aurora ACDB Audio Driver Stack-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.50%Aug 31, 2014
- Low3.5The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a fi…Check if you run itEPSS 1.98%Aug 26, 2014
- Medium6.0The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when u…Check if you run itEPSS 1.96%Aug 26, 2014
- Medium4.3The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses…Check if you run itEPSS 2.45%Aug 26, 2014
- Medium5.8The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate U…Check if you run itEPSS 2.29%Aug 26, 2014
- Medium4.3The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and cl…Check this weekEPSS 16.29%Aug 13, 2014
- High7.5Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (applica…Check this weekEPSS 74.08%Aug 13, 2014
- Medium4.3The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHel…Check this weekEPSS 14.13%Aug 13, 2014
- Medium4.3The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cau…Check this weekEPSS 18.37%Aug 13, 2014
- Medium6.8Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumpt…Check this weekEPSS 12.91%Aug 13, 2014
- Medium4.3The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does…Check this weekEPSS 24.52%Aug 13, 2014
- Medium5.0Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a de…Check this weekEPSS 54.28%Aug 13, 2014
- Medium5.0d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service…Check this weekEPSS 46.12%Aug 13, 2014
- Medium5.0Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers…Check this weekEPSS 46.12%Aug 13, 2014
- Medium6.8Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote auth…Check this weekEPSS 26.50%Aug 12, 2014
- Critical9.3Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app th…Check this weekEPSS 16.15%Aug 12, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject…Check this weekEPSS 14.72%Aug 12, 2014
- High8.8Microsoft Internet Explorer Privilege Escalation VulnerabilityPatch nowKEVEPSS 26.35%Aug 12, 2014
- Critical9.8Adobe Reader and Acrobat Sandbox Bypass VulnerabilityPatch nowKEVEPSS 22.33%Aug 12, 2014
- Medium4.9mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the mood…Check if you run itEPSS 1.02%Jul 29, 2014
- Medium6.0The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a sessio…Check if you run itEPSS 1.17%Jul 29, 2014
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x bef…Check if you run itEPSS 1.75%Jul 29, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web s…Check if you run itEPSS 1.19%Jul 29, 2014
Sort