Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact…Check if you run itEPSS 0.68%May 3, 2011
- UnknownMicrosoft Office Improper Input ValidationPatch nowKEVEPSS 52.03%Apr 21, 2011
- UnknownLinux Kernel Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Patch nowKEVEPSS 4.89%Apr 19, 2011
- UnknownF5 nginx Out-of-bounds WritePatch nowKEVEPSS 75.08%Apr 19, 2011
- UnknownFCKEditor Multiple File Extension Handling PHP File Upload VulnerabilityPatch nowKEVEPSS 8.00%Apr 19, 2011
- UnknownJBoss Direct Request Security BypassPatch nowKEVEPSS 82.26%Apr 19, 2011
- High8.8Adobe Flash Player Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.41%Apr 13, 2011
- UnknownMicrosoft Windows Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 47.10%Apr 12, 2011
- Medium5.0The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for othe…Check if you run itEPSS 8.69%Apr 8, 2011
- Medium5.8CVE-2011-1183 is listed by inventory_critical.Check if you run itEPSS 6.16%Apr 8, 2011
- High7.5webempoweredchurch wec_discussion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.30%Apr 7, 2011
- Medium4.3The configuration merger in itk.c in the Steinar H.Check if you run itEPSS 2.72%Mar 29, 2011
- High7.8Adobe Flash Player Unspecified VulnerabilityPatch nowKEVEPSS 63.51%Mar 15, 2011
- Medium5.8CVE-2011-1419 is listed by inventory_critical.Check if you run itEPSS 6.54%Mar 14, 2011
- Medium5.8Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to…Check if you run itEPSS 6.45%Mar 14, 2011
- UnknownMicrosoft CSS Memory Corruption VulnerabilityPatch nowKEVEPSS 81.66%Mar 8, 2011
- Critical9.3Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.81%Feb 21, 2011
- Medium5.0ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive info…Check if you run itEPSS 9.85%Feb 19, 2011
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow rem…Check this weekEPSS 10.01%Feb 19, 2011
- UnknownPivotX before 2.2.4 Password Reset Security BypassPatch nowKEVEPSS 4.02%Feb 18, 2011
- Low2.1The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to g…Check if you run itEPSS 0.36%Feb 16, 2011
- High7.5Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash)…Check if you run itEPSS 2.86%Feb 14, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a…Check if you run itEPSS 2.59%Feb 14, 2011
- Medium6.8CVE-2011-0696 is listed by inventory_high.Check if you run itEPSS 1.60%Feb 14, 2011
- Medium5.0Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows rem…Check if you run itEPSS 7.89%Feb 10, 2011
Sort