Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.99%Jan 17, 2017
- UnknownMozilla Firefox Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 63.94%Jan 9, 2017
- UnknownMozilla seamonkey Improper Input ValidationPatch nowKEVEPSS 41.71%Jan 9, 2017
- UnknownMozilla Firefox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 12.00%Jan 9, 2017
- High7.8The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compile…Check if you run itEPSS 1.28%Jan 5, 2017
- Medium6.2authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive privat…Check if you run itEPSS 1.10%Jan 5, 2017
- High7.0sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via…Check if you run itEPSS 4.24%Jan 5, 2017
- High7.3Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging…Check this weekEPSS 37.43%Jan 5, 2017
- Critical9.8PHPMailer Command Injection VulnerabilityPatch nowKEVEPSS 99.71%Dec 30, 2016
- High7.5An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5.Check if you run itEPSS 4.91%Dec 29, 2016
- Critical9.8An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7.Check if you run itEPSS 1.39%Dec 29, 2016
- Medium5.4Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject arbitrary w…Check if you run itEPSS 1.13%Dec 29, 2016
- High7.7VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup,…Check if you run itEPSS 1.88%Dec 29, 2016
- High7.1CVE-2016-7291 is listed by inventory_critical.Check this weekEPSS 23.41%Dec 20, 2016
- High7.1CVE-2016-7290 is listed by inventory_critical.Check this weekEPSS 23.41%Dec 20, 2016
- High7.1Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from p…Check this weekEPSS 25.41%Dec 20, 2016
- High7.1Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2…Check this weekEPSS 22.77%Dec 20, 2016
- High7.1Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Serv…Check this weekEPSS 21.66%Dec 20, 2016
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 58.84%Dec 19, 2016
- UnknownCVE-2001-0540 The Terminal Server in Microsoft Windows is vulnerable to a denial of service attack, caused by a memory leak.Check this weekEPSS 71.25%Dec 14, 2016
- High8.8NETGEAR Multiple Routers Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 14, 2016
- UnknownEpubCheck 4.0.1 contains a XML external entity processing vulnerability EpubCheck is a tool to validate that EPUB files follow the proper format.Check if you run itEPSS 1.26%Dec 14, 2016
- UnknownEir D1000 Modem TR-064 Remote Command ExecutionPatch nowKEVEPSS 81.90%Dec 14, 2016
- High7.0mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5…Check if you run itEPSS 2.97%Dec 13, 2016
- High7.0Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x…Check if you run itEPSS 4.31%Dec 13, 2016
Sort