Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality,…Check if you run itEPSS 3.32%Jul 21, 2016
- Medium6.7Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, in…Check if you run itEPSS 0.42%Jul 21, 2016
- High7.5Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.Check if you run itEPSS 3.74%Jul 21, 2016
- High7.8SolarWinds Virtualization Manager Privilege Escalation VulnerabilityPatch nowKEVEPSS 3.67%Jun 17, 2016
- Medium5.5Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Autom…Check this weekEPSS 26.49%Jun 16, 2016
- High7.8Microsoft Office OLE DLL Side Loading VulnerabilityPatch nowKEVEPSS 43.31%Jun 15, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- UnknownAdobe Reader and Acrobat Launch File Warning VulnerabilityPatch nowKEVEPSS 73.62%May 16, 2016
- Unknownhancom hangul_word_processor Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.49%May 13, 2016
- Medium5.5ImageMagick Arbitrary File Deletion VulnerabilityPatch nowKEVEPSS 75.31%May 5, 2016
- High8.4ImageMagick Improper Input Validation VulnerabilityPatch nowKEVEPSS 97.48%May 4, 2016
- UnknownThe tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointCheck if you run itEPSS 0.37%May 2, 2016
- High8.1Apache Struts Command Injection VulnerabilityPatch nowKEVEPSS 96.05%Apr 26, 2016
- Critical9.0Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integr…Check if you run itEPSS 2.89%Apr 21, 2016
- Medium5.9Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.Check if you run itEPSS 1.74%Apr 21, 2016
- Critical9.8Oracle WebLogic ClassFilter.class ServerChannelInputStream Bypass Java DeserializationPatch nowKEVEPSS 62.92%Apr 21, 2016
- Critical9.8Oracle Java SE and JRockit Unspecified VulnerabilityPatch nowKEVEPSS 92.33%Apr 21, 2016
- High7.8Microsoft Windows CSRSS Security Feature Bypass VulnerabilityPatch nowKEVEPSS 62.94%Apr 12, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 13.73%Apr 12, 2016
- High8.8Google Chromium V8 Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 48.11%Mar 29, 2016
- UnknownJBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method Security BypassPatch nowKEVEPSS 1.69%Mar 25, 2016
- UnknownLinux kernel before 3.16 pipe_read and pipe_write I/O Vector Array OverrunPatch nowKEVEPSS 1.41%Mar 18, 2016
- High8.8Adobe Flash Player and AIR Integer Overflow VulnerabilityPatch nowKEVEPSS 19.33%Mar 10, 2016
- High7.8Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 37.05%Mar 9, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 5.68%Mar 8, 2016
Sort