Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, whi…Check if you run itEPSS 7.14%May 16, 2016
- UnknownAdobe Reader and Acrobat Launch File Warning VulnerabilityPatch nowKEVEPSS 73.62%May 16, 2016
- Unknownimlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse.Check if you run itEPSS 2.53%May 13, 2016
- Unknownhancom hangul_word_processor Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.49%May 13, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- High8.8The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remot…Check this weekEPSS 15.70%May 11, 2016
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbi…Check this weekEPSS 19.38%May 11, 2016
- High7.8Microsoft Windows Media Center Remote Code Execution VulnerabilityPatch nowKEVEPSS 69.85%May 10, 2016
- High7.5Microsoft Internet Explorer Memory Corruption VulnerabilityPatch nowKEVEPSS 94.06%May 10, 2016
- Critical9.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 94.27%May 8, 2016
- Medium5.5ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 75.65%May 5, 2016
- Medium5.5ImageMagick Arbitrary File Deletion VulnerabilityPatch nowKEVEPSS 75.31%May 5, 2016
- High8.2The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from…Check this weekEPSS 23.95%May 5, 2016
- High7.5The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to ca…Check this weekEPSS 29.21%May 5, 2016
- Critical9.8The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underf…Check this weekEPSS 77.91%May 5, 2016
- Medium5.9CVE-2016-2107 is listed by inventory_critical.Check this weekEPSS 89.06%May 5, 2016
- High7.5Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial o…Check this weekEPSS 27.26%May 5, 2016
- High7.5Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of…Check this weekEPSS 39.65%May 5, 2016
- High7.5crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to…Check if you run itEPSS 3.14%May 5, 2016
- High8.4ImageMagick Improper Input Validation VulnerabilityPatch nowKEVEPSS 97.48%May 4, 2016
- UnknownThe tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointCheck if you run itEPSS 0.37%May 2, 2016
- High7.8The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in u…Check if you run itEPSS 0.60%May 1, 2016
- Critical9.8XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the style…Check this weekEPSS 19.17%Apr 26, 2016
- High8.1Apache Struts Command Injection VulnerabilityPatch nowKEVEPSS 96.53%Apr 26, 2016
- UnknownSchannel Security Feature Bypass VulnerabilityPatch nowKEVEPSS 13.15%Apr 26, 2016
Sort