Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5CVE-2012-0113 is listed by oracle.Check if you run itEPSS 2.48%Jan 18, 2012
- Low3.5CVE-2012-0112 is listed by oracle.Check if you run itEPSS 2.11%Jan 18, 2012
- Medium4.0CVE-2012-0102 is listed by oracle.Check if you run itEPSS 2.90%Jan 18, 2012
- Medium4.0CVE-2012-0101 is listed by oracle.Check if you run itEPSS 2.90%Jan 18, 2012
- Medium4.0CVE-2012-0087 is listed by oracle.Check if you run itEPSS 2.90%Jan 18, 2012
- Low1.7Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.Check if you run itEPSS 2.40%Jan 18, 2012
- Medium5.0Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.Check if you run itEPSS 3.04%Jan 18, 2012
- Medium4.6scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecif…Check if you run itEPSS 2.80%Jan 18, 2012
- UnknownMicrosoft .NET Framework CaseInsensitiveHashProvider.getHashCode Function VulnerabilityPatch nowKEVEPSS 57.69%Jan 17, 2012
- UnknownphpMyAdmin phpMyAdmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 12.88%Jan 17, 2012
- Medium4.3CVE-2011-5064 is listed by inventory_critical.Check if you run itEPSS 6.33%Jan 14, 2012
- Medium4.3CVE-2011-5063 is listed by inventory_critical.Check if you run itEPSS 6.49%Jan 14, 2012
- Medium5.0CVE-2011-5062 is listed by inventory_critical.Check if you run itEPSS 7.36%Jan 14, 2012
- Medium5.0The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected counterm…Check if you run itEPSS 8.24%Jan 14, 2012
- Critical9.8CVE-2011-4373 is listed by apple.Check this weekEPSS 30.25%Jan 10, 2012
- Critical9.8CVE-2011-4372 is listed by apple.Check this weekEPSS 12.58%Jan 10, 2012
- High7.5Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memor…Check if you run itEPSS 6.21%Jan 10, 2012
- High7.5CVE-2011-4370 is listed by apple.Check if you run itEPSS 6.21%Jan 10, 2012
- Medium5.0Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections,…Check this weekEPSS 27.22%Jan 8, 2012
- Medium6.8The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors.Check this weekEPSS 72.90%Jan 8, 2012
- Medium6.4The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite…Check this weekEPSS 36.32%Jan 8, 2012
- Medium6.8The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands…Check this weekEPSS 97.53%Jan 8, 2012
- Critical9.8Apache Struts 2 Improper Input Validation VulnerabilityPatch nowKEVEPSS 75.60%Jan 8, 2012
- Critical9.3Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering…Check this weekEPSS 16.91%Jan 6, 2012
- Medium4.3The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attacker…Check this weekEPSS 16.05%Jan 6, 2012
Sort