Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer ov…Check this weekEPSS 44.51%Jun 20, 2016
- High7.8SolarWinds Virtualization Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.67%Jun 17, 2016
- Medium5.5Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Autom…Check this weekEPSS 26.49%Jun 16, 2016
- High7.3Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Micros…Check this weekEPSS 14.82%Jun 16, 2016
- Medium5.5Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly…Check this weekEPSS 22.55%Jun 16, 2016
- High7.3Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatib…Check this weekEPSS 16.72%Jun 16, 2016
- High7.8Microsoft Office OLE DLL Side Loading VulnerabilityPatch nowKEVEPSS 43.31%Jun 15, 2016
- Critical9.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 20.05%Jun 15, 2016
- Unknownlibarchive contains a heap-based buffer overflow due to improper input validation CWE-20: Improper Input Validation - CVE-2016-1541 A crafted zip file can provide an i…Check this weekEPSS 10.28%Jun 14, 2016
- UnknownMicrosoft XMP Core Services Improper Input ValidationPatch nowKEVEPSS 15.33%Jun 14, 2016
- High7.5Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityPatch nowKEVEPSS 31.17%Jun 9, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allo…Check if you run itEPSS 1.07%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 44.94%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 16.35%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check if you run itEPSS 8.77%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 13.34%Jun 8, 2016
- UnknownNTP.org ntpd is vulnerable to denial of service a NTP.org's reference implementation of NTP server, ntpd, contains multiple vulnerabilities.Check this weekEPSS 17.24%Jun 8, 2016
- Medium5.3Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of se…Check if you run itEPSS 8.44%Jun 7, 2016
- Critical9.8Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code…Check this weekEPSS 81.87%Jun 7, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- High7.8The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileg…Check if you run itEPSS 0.47%Jun 3, 2016
- Unknownwp_mobile_detector_project wp_mobile_detector Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 8.89%Jun 3, 2016
- High7.5The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony before 2.3.41, 2.7.x before 2.7.13, 2.…Check if you run itEPSS 1.86%Jun 1, 2016
- High7.5The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when u…Check if you run itEPSS 1.91%Jun 1, 2016
- Critical9.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.37%Jun 1, 2016
Sort