Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMozilla Firefox Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 64.76%Jan 9, 2017
- UnknownEir D1000 Modem TR-064 Remote Command ExecutionPatch nowKEVEPSS 81.77%Dec 14, 2016
- UnknownOracle linux Improper Input ValidationPatch nowKEVEPSS 89.48%Oct 5, 2016
- UnknownMicrosoft Internet Explorer Uninitialized Memory CorruptionPatch nowKEVEPSS 26.26%Sep 29, 2016
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Improper AuthenticationPatch nowKEVEPSS 1.99%Sep 28, 2016
- High8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site sc…Check this weekEPSS 25.74%Jul 4, 2016
- UnknownSchannel Security Feature Bypass VulnerabilityPatch nowKEVEPSS 13.15%Apr 26, 2016
- Medium4.3Microsoft Internet Explorer Information Disclosure VulnerabilityPatch nowKEVEPSS 22.01%Apr 12, 2016
- UnknownLinux kernel before 3.16 pipe_read and pipe_write I/O Vector Array OverrunPatch nowKEVEPSS 1.41%Mar 18, 2016
- High7.8Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 37.05%Mar 9, 2016
- UnknownMicrosoft Internet Explorer Use of Uninitialized ResourcePatch nowKEVEPSS 42.10%Feb 23, 2016
- Medium5.0The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of…Check this weekEPSS 13.87%Jun 7, 2015
- High7.8Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…Check this weekEPSS 20.18%Jun 7, 2015
- Unknownh-fj mt-phpincgi Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.70%May 20, 2015
- Unknowndebian debian_linux Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 16.89%Apr 27, 2015
- High7.5Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary…Check if you run itEPSS 5.30%Apr 1, 2015
- Unknowncolorlib fancybox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.41%Feb 17, 2015
- Medium6.4java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle atte…Check this weekEPSS 21.04%Feb 16, 2015
- High7.5The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X,…Check if you run itEPSS 2.15%Feb 6, 2015
- Medium5.0The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 o…Check if you run itEPSS 1.98%Feb 6, 2015
- High7.8Adobe Flash Player ASLR Bypass VulnerabilityPatch nowKEVEPSS 15.10%Jan 16, 2015
- UnknownThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress Admin AJAX Security BypassPatch nowKEVEPSS 75.56%Dec 15, 2014
- High8.8GNU Bash OS Command Injection VulnerabilityPatch nowKEVEPSS 99.68%Sep 30, 2014
- Medium4.3Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT styles…Check if you run itEPSS 7.62%May 31, 2014
- Medium4.3java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly…Check if you run itEPSS 6.91%May 31, 2014