Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Apache CouchDB Improper Neutralization of Special Elements used in an OS CommandPatch nowKEVEPSS 90.60%Nov 14, 2017
- High7.5A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during…Check this weekEPSS 39.92%Nov 13, 2017
- High7.8Roundcube Webmail File Disclosure VulnerabilityPatch nowKEVEPSS 45.74%Nov 8, 2017
- High7.8tgsoft vir.it_explorer Improper Input ValidationPatch nowKEVEPSS 1.51%Nov 3, 2017
- Critical9.1MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which e…Check if you run itEPSS 1.57%Nov 1, 2017
- UnknownNETGEAR DGN1000 setup.cgi Authentication Bypass VulnerabilityPatch nowKEVEPSS 30.36%Nov 1, 2017
- UnknownHangul Word Processor (HWP) Encapsulated PostScript VulnerabilityPatch nowKEVNov 1, 2017
- Unknowngetshortcodes shortcodes_ultimate Improper Input ValidationPatch nowKEVEPSS 12.09%Oct 31, 2017
- High8.8The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.Check if you run itEPSS 5.71%Oct 30, 2017
- High7.8The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29…Check if you run itEPSS 0.37%Oct 27, 2017
- UnknownMultiple Vulnerabilities in PHP Could Allow for Arbitrary Code Execution -CVE-2016-1283 Multiple vulnerabilities have been discovered in PHP, the most severe of which…Check if you run itEPSS 7.79%Oct 27, 2017
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 32.07%Oct 26, 2017
- High7.2It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite us…Check if you run itEPSS 1.92%Oct 26, 2017
- High7.5It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session.Check if you run itEPSS 2.71%Oct 26, 2017
- Medium5.4It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations.Check if you run itEPSS 1.02%Oct 26, 2017
- Medium5.3The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.Check if you run itEPSS 3.36%Oct 26, 2017
- UnknownAnalysis of CVE-2017-12628 | NickstaDBCheck if you run itEPSS 0.76%Oct 23, 2017
- Unknownaccesspressthemes ultimate-form-builder-lite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.80%Oct 23, 2017
- Medium5.4Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote auth…Check if you run itEPSS 1.28%Oct 20, 2017
- UnknownImproper Input ValidationPatch nowKEVEPSS 7.51%Oct 20, 2017
- UnknownMVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE Remote Command ExecutionPatch nowKEVEPSS 86.19%Oct 20, 2017
- Medium6.5CVE-2017-10384 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)..Check if you run itEPSS 3.10%Oct 19, 2017
- Medium6.5CVE-2017-10379 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)..Check if you run itEPSS 2.30%Oct 19, 2017
- Medium6.5CVE-2017-10378 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)..Check if you run itEPSS 3.26%Oct 19, 2017
- Low3.8CVE-2017-10365 is listed by Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)..Check if you run itEPSS 1.72%Oct 19, 2017
Sort