Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownPHP PHP Improper Input ValidationPatch nowKEVEPSS 50.34%Jan 15, 2018
- UnknownPHP sapi/cgi/cgi_main.c Component VulnerabilityPatch nowKEVEPSS 32.23%Jan 15, 2018
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 99.94%Nov 14, 2017
- High7.8Microsoft Office Remote Code Execution VulnerabilityPatch nowKEVEPSS 81.33%Sep 28, 2017
- Critical9.8Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness VulnerabilityPatch nowKEVEPSS 75.10%Jul 3, 2017
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 62.17%Jun 20, 2017
- UnknownMicrosoft Windows Mitigating Factors for SMBv2 Infinite LoopPatch nowKEVEPSS 81.89%Jun 20, 2017
- UnknownphpBB 2.x before 2.0.11viewtopic.php Arbitrary PHP Code ExecutionPatch nowKEVEPSS 72.54%Jun 20, 2017
- Unknownwu-ftpd 2.6.1 Arbitrary Command ExecutionPatch nowKEVEPSS 74.65%Jun 20, 2017
- High8.8A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".Check this weekEPSS 22.13%Jun 15, 2017
- High8.8A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".Check this weekEPSS 18.24%Jun 15, 2017
- High8.8Microsoft Windows Shell (.lnk) Remote Code Execution VulnerabilityPatch nowKEVEPSS 90.03%Jun 13, 2017
- High7.8Microsoft Malware Protection Engine Improper Restriction of Operations VulnerabilityPatch nowKEVEPSS 71.87%May 26, 2017
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server…Check this weekEPSS 15.76%May 12, 2017
- High7.8Microsoft Office Remote Code Execution VulnerabilityPatch nowKEVEPSS 81.01%May 9, 2017
- High7.8Microsoft Office Use-After-Free VulnerabilityPatch nowKEVEPSS 78.13%May 9, 2017
- High8.8Microsoft Internet Explorer Remote Code Execution VulnerabilityPatch nowKEVEPSS 29.64%May 9, 2017
- High8.8Microsoft Internet Explorer Privilege Escalation VulnerabilityPatch nowKEVEPSS 22.33%Apr 11, 2017
- Medium6.5Microsoft XML Core Services Information Disclosure VulnerabilityPatch nowKEVEPSS 18.07%Mar 14, 2017
- UnknownMozilla Firefox Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 64.76%Jan 9, 2017
- UnknownEir D1000 Modem TR-064 Remote Command ExecutionPatch nowKEVEPSS 81.77%Dec 14, 2016
- UnknownOracle linux Improper Input ValidationPatch nowKEVEPSS 89.48%Oct 5, 2016
- UnknownMicrosoft Internet Explorer Uninitialized Memory CorruptionPatch nowKEVEPSS 26.26%Sep 29, 2016
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Improper AuthenticationPatch nowKEVEPSS 1.99%Sep 28, 2016
- High8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site sc…Check this weekEPSS 25.74%Jul 4, 2016