Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encount…Check if you run itEPSS 0.67%Jun 29, 2011
- UnknownJava Runtime Environment (JRE) Deployment Component Unspecified VulnerabilityPatch nowKEVEPSS 83.04%Jun 20, 2011
- Medium4.3The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and V…Check this weekEPSS 15.25%Jun 16, 2011
- Critical9.8Microsoft Forefront TMG Remote Code Execution VulnerabilityPatch nowKEVEPSS 49.02%Jun 16, 2011
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 86.42%Jun 16, 2011
- High7.8Android OS Privilege Escalation VulnerabilityPatch nowKEVEPSS 41.37%Jun 9, 2011
- Unknowncreloaded cre_loaded Improper AuthenticationPatch nowKEVEPSS 1.41%Jun 8, 2011
- UnknownAdobe Flash Player Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 3.55%Jun 6, 2011
- Unknownplone.app.users in Plone 4.0 and 4.1 Remote Authenticated Account ManipulationPatch nowKEVEPSS 2.35%Jun 6, 2011
- UnknownApache subversion NULL Pointer DereferencePatch nowKEVEPSS 8.48%Jun 6, 2011
- Low2.6The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA…Check if you run itEPSS 3.29%May 31, 2011
- Medium4.3CVE-2011-1928 is listed by inventory_critical.Check this weekEPSS 10.32%May 24, 2011
- UnknownOracle Java SE and Java for Business New Java Plug-in Component VulnerabilityPatch nowKEVEPSS 80.74%May 24, 2011
- UnknownOracle Java SE and Java for Business Sound Component VulnerabilityPatch nowKEVEPSS 77.72%May 24, 2011
- Medium4.3CVE-2011-1582 is listed by inventory_critical.Check if you run itEPSS 6.02%May 20, 2011
- Medium4.3Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server bef…Check this weekEPSS 30.41%May 16, 2011
- UnknownObject Management Memory Corruption VulnerabilityPatch nowKEVEPSS 40.88%May 16, 2011
- UnknownMicrosoft Internet Explorer 6 and 7 Layouts Handling Memory Corruption VulnerabilityPatch nowKEVEPSS 21.91%May 16, 2011
- Medium5.0CVE-2011-2088 is listed by inventory_high.Check if you run itEPSS 6.14%May 13, 2011
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remo…Check if you run itEPSS 6.13%May 13, 2011
- Low2.6Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers…Check this weekEPSS 33.35%May 13, 2011
- UnknownAdobe Flash Player Improper Input ValidationPatch nowKEVEPSS 5.11%May 12, 2011
- Medium6.8Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact…Check if you run itEPSS 0.68%May 3, 2011
- UnknownMicrosoft Office Improper Input ValidationPatch nowKEVEPSS 52.03%Apr 21, 2011
- UnknownLinux Kernel Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 4.89%Apr 19, 2011
Sort