Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Microsoft Office OLE DLL Side Loading VulnerabilityKEVEPSS 43.3%Jun 15, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityKEVEPSS 93.0%Jun 7, 2016
- High8.1Apache Struts Command Injection VulnerabilityKEVEPSS 96.1%Apr 26, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityKEVEPSS 47.3%Apr 7, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…EPSS 9.7%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…EPSS 10.6%Feb 25, 2016
- Medium5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security…EPSS 18.4%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…EPSS 12.6%Feb 25, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityKEVEPSS 52.2%Feb 16, 2016
- Critical9.8SAP NetWeaver SQL Injection VulnerabilityKEVEPSS 71.5%Feb 16, 2016
- High7.8Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityKEVEPSS 5.0%Dec 7, 2015
- High7.8Adobe Flash Player Arbitrary Code Execution VulnerabilityKEVEPSS 65.3%Oct 15, 2015
- Critical10.0ProFTPD Improper Access Control VulnerabilityKEVEPSS 99.5%May 18, 2015
- Critical9.8Realtek SDK Improper Input Validation VulnerabilityKEVEPSS 100.0%May 1, 2015
- High7.5TP-Link Multiple Archer Devices Directory Traversal VulnerabilityKEVEPSS 83.9%Apr 21, 2015
- Critical9.8Microsoft HTTP.sys Remote Code Execution VulnerabilityKEVEPSS 100.0%Apr 14, 2015
- High7.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (…EPSS 12.8%Mar 9, 2015
- Low1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.EPSS 2.9%Feb 19, 2015
- Critical9.8Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityKEVEPSS 99.9%Feb 17, 2015
- Critical9.8Adobe Flash Player Use-After-Free VulnerabilityKEVEPSS 95.3%Feb 2, 2015
- High7.8Microsoft Windows TS WebProxy Directory Traversal VulnerabilityKEVEPSS 75.8%Jan 13, 2015
- High8.8Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityKEVEPSS 94.9%Nov 11, 2014
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityKEVEPSS 86.9%Oct 15, 2014
- Critical9.8Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityKEVEPSS 99.3%Oct 7, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityKEVEPSS 99.9%Sep 24, 2014