Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.Check if you run itEPSS 6.60%Oct 3, 2016
- High7.8The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java pa…Check if you run itEPSS 9.78%Oct 3, 2016
- UnknownAdobe ColdFusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.81%Sep 29, 2016
- UnknownMicrosoft Excel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 29.97%Sep 29, 2016
- UnknownMicrosoft Internet Explorer Uninitialized Memory CorruptionPatch nowKEVEPSS 26.26%Sep 29, 2016
- UnknownMicrosoft Internet Explorer ASCII encoded Web filter bypassPatch nowKEVEPSS 13.53%Sep 29, 2016
- UnknownWatchGuard RapidStream Appliances Command ExecutionPatch nowKEVEPSS 1.24%Sep 28, 2016
- UnknownFortinet FortiOS Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 49.86%Sep 28, 2016
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Improper AuthenticationPatch nowKEVEPSS 1.99%Sep 28, 2016
- Critical9.8xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namesp…Check if you run itEPSS 8.56%Sep 25, 2016
- Critical9.8MySQL, MariaDB, Percona malloc_lib Remote Root Code ExecutionPatch nowKEVEPSS 67.73%Sep 20, 2016
- Unknowndynamicpress neosense Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.23%Sep 20, 2016
- High7.5Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityPatch nowKEVEPSS 87.69%Sep 18, 2016
- High7.5The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command lines of failed commands, which might allow context-depend…Check if you run itEPSS 1.12%Sep 18, 2016
- Critical9.8The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of…Check this weekEPSS 44.22%Sep 16, 2016
- High7.5The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, whic…Check this weekEPSS 22.63%Sep 16, 2016
- High7.5The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows rem…Check this weekEPSS 26.56%Sep 16, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via…Check if you run itEPSS 8.23%Sep 14, 2016
- High7.4Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative…Check this weekEPSS 15.28%Sep 14, 2016
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Servic…Check this weekEPSS 54.81%Sep 14, 2016
- Medium6.5The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allow…Check if you run itEPSS 4.90%Sep 14, 2016
- Medium4.3Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 mi…Check this weekEPSS 13.46%Sep 14, 2016
- UnknownDEXIS Imaging Suite 10 contains hard-coded credentials CWE-798: Use of Hard-coded Credentials - CVE-2016-6532 DEXIS Imaging Suite 10 contains several hard-coded databa…Check if you run itEPSS 3.27%Sep 13, 2016
- Medium6.5Microsoft Internet Explorer and Edge Information Disclosure VulnerabilityPatch nowKEVEPSS 26.48%Sep 13, 2016
- Medium6.5PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R…Check if you run itEPSS 0.67%Sep 9, 2016
Sort