Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8NETGEAR DGN2200 Devices OS Command Injection VulnerabilityPatch nowKEVEPSS 72.64%Mar 5, 2017
- Critical9.8NETGEAR DGN2200 Remote Code Execution VulnerabilityPatch nowKEVEPSS 68.71%Feb 22, 2017
- High8.1NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityPatch nowKEVEPSS 89.35%Jan 17, 2017
- UnknownMozilla seamonkey Improper Input ValidationPatch nowKEVEPSS 40.12%Jan 9, 2017
- UnknownFortinet FortiOS Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 49.86%Sep 28, 2016
- High7.5Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityPatch nowKEVEPSS 87.69%Sep 18, 2016
- UnknownvBulletin vBulletin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 68.49%Aug 30, 2016
- High8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications fr…Check this weekEPSS 50.90%Jul 19, 2016
- High8.1ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary…Check this weekEPSS 13.12%Jul 4, 2016
- Critical9.8Apache Shiro Code Execution VulnerabilityPatch nowKEVEPSS 93.04%Jun 7, 2016
- Critical9.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.52%Jun 1, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- Medium5.5ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 75.65%May 5, 2016
- UnknownRed Hat JBoss Application Server Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.14%Mar 25, 2016
- UnknownRed Hat jboss_enterprise_brms_platform Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 1.57%Mar 25, 2016
- UnknownJBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method Security BypassPatch nowKEVEPSS 1.69%Mar 25, 2016
- High7.8Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityPatch nowKEVEPSS 37.05%Mar 9, 2016
- Medium4.3Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the o…Check if you run itEPSS 6.23%Feb 25, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…Check if you run itEPSS 9.67%Feb 25, 2016
- High8.1Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments…Check this weekEPSS 10.57%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…Check this weekEPSS 12.55%Feb 25, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016
- High7.8Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…Check this weekEPSS 20.18%Jun 7, 2015
- Unknownh-fj mt-phpincgi Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.70%May 20, 2015
- Critical9.8Realtek SDK Improper Input Validation VulnerabilityPatch nowKEVEPSS 99.97%May 1, 2015
Sort