Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisio…Check this weekEPSS 79.71%Jan 5, 2012
- High8.8Microsoft MSCOMCTL.OCX Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.98%Jan 1, 2012
- UnknownMicrosoft Office Improper Input ValidationPatch nowKEVEPSS 14.88%Jan 1, 2012
- Medium5.0The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, relate…Check this weekEPSS 70.53%Dec 27, 2011
- UnknownGNU InetUtils Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 95.06%Dec 23, 2011
- Medium5.0CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote…Check if you run itEPSS 1.18%Dec 22, 2011
- Medium5.7D-Link DIR-300 Router Cleartext Storage of a Password VulnerabilityPatch nowKEVEPSS 3.06%Dec 20, 2011
- UnknownAdobe Reader and Acrobat PRC component Remote Code ExecutionPatch nowKEVEPSS 7.52%Dec 16, 2011
- Medium4.6Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HT…Check if you run itEPSS 1.24%Dec 10, 2011
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver allow remote attackers to inject arbitrary web script or HTML via the…Check if you run itEPSS 1.09%Dec 8, 2011
- Critical9.8Adobe Reader and Acrobat Universal 3D Memory Corruption VulnerabilityPatch nowKEVEPSS 88.58%Dec 7, 2011
- Medium5.0CRLF injection vulnerability in admin/displayImage.php in Prestashop 1.4.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitti…Check if you run itEPSS 3.47%Dec 2, 2011
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) address or (2) r…Check if you run itEPSS 3.13%Dec 1, 2011
- Low2.6Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote…Check if you run itEPSS 1.23%Dec 1, 2011
- Medium4.3CVE-2011-4317 is listed by inventory_critical.Check this weekEPSS 59.63%Nov 30, 2011
- Medium4.3CVE-2011-3639 is listed by inventory_critical.Check this weekEPSS 49.70%Nov 30, 2011
- Medium4.4org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which…Check if you run itEPSS 0.64%Nov 11, 2011
- Low1.2CVE-2011-4415 is listed by inventory_critical.Check if you run itEPSS 3.02%Nov 8, 2011
- Medium4.4Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is e…Check if you run itEPSS 4.90%Nov 8, 2011
- High8.8Microsoft Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 78.14%Nov 4, 2011
- Unknownphpldapadmin_project phpldapadmin Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 51.89%Nov 2, 2011
- High7.1Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to…Check if you run itEPSS 1.40%Oct 28, 2011
- High7.8Cisco unified_ip_interactive_voice_response Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 25.75%Oct 27, 2011
- UnknownMicrosoft .NET Framework Generation of Error Message Containing Sensitive InformationPatch nowKEVEPSS 68.23%Oct 26, 2011
- Medium6.5The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows re…Check if you run itEPSS 2.10%Oct 21, 2011
Sort