Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteR…Check this weekEPSS 90.73%Oct 5, 2011
- High7.5Unspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files…Check if you run itEPSS 1.37%Oct 4, 2011
- Medium6.8Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sourc…Check if you run itEPSS 8.60%Oct 4, 2011
- Medium5.0PrestaShop 1.4.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message…Check if you run itEPSS 1.93%Sep 24, 2011
- Medium5.0OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message,…Check if you run itEPSS 1.62%Sep 24, 2011
- Medium5.0Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as d…Check if you run itEPSS 1.58%Sep 23, 2011
- Medium5.0The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messa…Check if you run itEPSS 4.56%Sep 22, 2011
- Medium5.0crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validatio…Check if you run itEPSS 4.36%Sep 22, 2011
- UnknownAdobe Flash Player Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.70%Sep 22, 2011
- Medium4.3The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denia…Check this weekEPSS 22.38%Sep 20, 2011
- Critical9.3Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Servic…Check this weekEPSS 20.49%Sep 15, 2011
- Critical9.3Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open…Check this weekEPSS 27.77%Sep 15, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows…Check this weekEPSS 16.77%Sep 15, 2011
- Medium4.0Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 201…Check this weekEPSS 41.41%Sep 15, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject a…Check this weekEPSS 19.77%Sep 15, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arb…Check this weekEPSS 16.91%Sep 15, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inject arbitrary web script or…Check this weekEPSS 12.82%Sep 12, 2011
- Unknownxunlei web_thunder Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 3.61%Sep 1, 2011
- Unknownbaofeng storm Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 9.76%Sep 1, 2011
- Unknownppstream ppstream Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.18%Sep 1, 2011
- UnknownBaidu Soba Search Bar 'BaiduBar.dll' VulnerabilityPatch nowKEVEPSS 7.32%Sep 1, 2011
- High7.5Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow rem…Check this weekEPSS 15.23%Aug 31, 2011
- UnknownApache HTTP Server Uncontrolled Resource ConsumptionPatch nowKEVEPSS 98.95%Aug 24, 2011
- Medium5.0native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.…Check if you run itEPSS 7.24%Aug 15, 2011
- Medium4.6CVE-2011-2481 is listed by inventory_critical.Check if you run itEPSS 0.84%Aug 15, 2011
Sort