Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly…Check if you run itEPSS 6.91%May 31, 2014
- High8.8Microsoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityPatch nowKEVEPSS 64.88%May 13, 2014
- UnknownWindows Shell File Association VulnerabilityPatch nowKEVEPSS 1.77%May 13, 2014
- Medium5.5Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 22.48%May 7, 2014
- High7.5OpenSSL Information Disclosure VulnerabilityPatch nowKEVEPSS 100.00%Apr 7, 2014
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 38.70%Feb 11, 2014
- Medium6.8expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote…Check this weekEPSS 19.43%Jan 21, 2014
- Medium5.5Microsoft Silverlight Information Disclosure VulnerabilityPatch nowKEVEPSS 67.96%Oct 9, 2013
- UnknownISC BIND RFC 5011 Implementation in rdata.c Denial of ServicePatch nowKEVEPSS 34.15%Jul 26, 2013
- High8.8Mozilla Firefox and Thunderbird Denial-of-Service VulnerabilityPatch nowKEVEPSS 69.02%Jun 25, 2013
- Unknownrubyonrails rails Improper Input ValidationPatch nowKEVEPSS 99.45%May 28, 2013
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 39.32%May 24, 2013
- Medium6.5Mozilla Firefox Information Disclosure VulnerabilityPatch nowKEVEPSS 6.70%May 16, 2013
- High8.8Microsoft Internet Explorer Remote Code Execution VulnerabilityPatch nowKEVEPSS 77.74%May 5, 2013
- High7.8Microsoft Silverlight Double Dereference VulnerabilityPatch nowKEVEPSS 78.89%Mar 12, 2013
- High8.8Adobe Flash Player Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 10.53%Feb 26, 2013
- High8.8Microsoft Internet Explorer Use-After-Free VulnerabilityPatch nowKEVEPSS 78.82%Dec 29, 2012
- UnknownApple iOS before 4.2.9 and 4.3.x before 4.3.4 IOMobileFrameBuffer Privilege EscalationPatch nowKEVEPSS 0.32%Oct 9, 2012
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 61.66%Sep 1, 2012
- Critical9.8PHP-CGI Query String Parameter VulnerabilityPatch nowKEVEPSS 100.00%May 11, 2012
- UnknownPHP PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 69.27%May 9, 2012
- High7.8Microsoft Windows Authenticode Signature Verification Remote Code Execution VulnerabilityPatch nowKEVEPSS 87.72%Apr 10, 2012
- UnknownLinux kernel before 3.2.2 Process Memory Modification VulnerabilityPatch nowKEVEPSS 10.84%Jan 27, 2012
- High7.8Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation VulnerabilityPatch nowKEVEPSS 31.76%Oct 11, 2011
- UnknownRemote Desktop Protocol VulnerabilityPatch nowKEVEPSS 25.71%Aug 9, 2011