Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party X…Check if you run itEPSS 1.24%May 22, 2012
- Critical9.1Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7…Check this weekEPSS 66.26%May 22, 2012
- Medium4.3The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to s…Check if you run itEPSS 1.65%May 21, 2012
- Medium6.0SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain…Check if you run itEPSS 1.31%May 21, 2012
- Medium5.0Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allo…Check if you run itEPSS 2.55%May 21, 2012
- Medium4.0Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administ…Check if you run itEPSS 1.90%May 21, 2012
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authentic…Check if you run itEPSS 1.11%May 21, 2012
- Low3.5Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticat…Check if you run itEPSS 1.83%May 21, 2012
- Low2.6Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, a…Check if you run itEPSS 1.61%May 21, 2012
- UnknownPHP PHP Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 19.84%May 21, 2012
- Medium5.0The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause…Check if you run itEPSS 3.60%May 15, 2012
- Critical9.3The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when…Check this weekEPSS 44.28%May 15, 2012
- Medium5.0The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to ca…Check if you run itEPSS 3.60%May 15, 2012
- Medium5.0The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a d…Check if you run itEPSS 3.60%May 15, 2012
- Medium5.0The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to ca…Check if you run itEPSS 3.60%May 15, 2012
- Medium5.0The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to caus…Check if you run itEPSS 3.95%May 15, 2012
- Critical9.8PHP-CGI Query String Parameter VulnerabilityPatch nowKEVEPSS 100.00%May 11, 2012
- UnknownPHP PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 69.27%May 9, 2012
- Critical9.0VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not…Check if you run itEPSS 2.46%May 4, 2012
- Critical9.0VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do no…Check if you run itEPSS 2.48%May 4, 2012
- High7.5VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic.Check if you run itEPSS 3.47%May 4, 2012
- Critical9.0The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and pr…Check if you run itEPSS 2.43%May 4, 2012
- Critical9.9The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service…Check if you run itEPSS 3.20%May 4, 2012
- UnknownAdobe Flash Player object confusion Remote Code ExecutionPatch nowKEVEPSS 87.09%May 4, 2012
- Medium6.8CVE-2012-1703 is listed by inventory_high.Check if you run itEPSS 3.73%May 3, 2012
Sort