Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.1Apache Tomcat on Windows Remote Code Execution VulnerabilityVuln · CVE-2017-12615 · Apache · Tomcat · CISA KEV · CVE.org · FIRST EPSS · Apache, JBossPatch nowKEVEPSS 99.64%Sep 19, 2017
High8.1Apache Struts Deserialization of Untrusted Data VulnerabilityVuln · CVE-2017-9805 · Apache · Struts · CISA KEV · CVE.org · FIRST EPSS · Apache, CiscoPatch nowKEVEPSS 99.40%Sep 15, 2017
High7.8Microsoft .NET Framework Remote Code Execution VulnerabilityVuln · CVE-2017-8759 · Microsoft · .NET Framework · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 88.70%Sep 12, 2017
High7.5Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service VulnerabilityVuln · CVE-2017-6627 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 6.16%Sep 7, 2017
Critical9.8Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityVuln · CVE-2017-11357 · Progress · User Interface (UI) for ASP.NET AJAX · CISA KEV · CVE.org · FIRST EPSS · Microsoft, ProgressPatch nowKEVEPSS 77.68%Aug 23, 2017
Critical9.8Telerik UI for ASP.NET AJAX Unrestricted File Upload VulnerabilityVuln · CVE-2017-11317 · Progress · User Interface (UI) for ASP.NET AJAX · CISA KEV · CVE.org · FIRST EPSS · Microsoft, ProgressPatch nowKEVEPSS 84.17%Aug 23, 2017
High8.8Symantec Messaging Gateway Remote Code Execution VulnerabilityVuln · CVE-2017-6327 · Symantec · Symantec Messaging Gateway · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 35.91%Aug 11, 2017
High7.8Intel Ethernet Diagnostics Driver for Windows Denial-of-Service VulnerabilityVuln · CVE-2015-2291 · Intel · Ethernet Diagnostics Driver for Windows · CISA KEV · CVE.org · FIRST EPSS · Cisco, MicrosoftPatch nowKEVEPSS 9.01%Aug 9, 2017
High7.5SAP NetWeaver Directory Traversal VulnerabilityVuln · CVE-2017-12637 · SAP · NetWeaver · CISA KEV · CVE.org · FIRST EPSS · SAPPatch nowKEVEPSS 95.11%Aug 7, 2017
Medium6.5Cisco IOS Software and Cisco IOS XE Software Denial-of-Service VulnerabilityVuln · CVE-2017-6663 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 2.12%Aug 6, 2017
High8.8DotNetNuke (DNN) Remote Code Execution VulnerabilityVuln · CVE-2017-9822 · DotNetNuke (DNN) · DotNetNuke (DNN) · CISA KEV · CVE.org · FIRST EPSS · DotNetNukePatch nowKEVEPSS 94.79%Jul 20, 2017
Critical9.8Citrix Multiple Products Remote Code Execution VulnerabilityVuln · CVE-2017-6316 · Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server · CISA KEV · CVE.org · FIRST EPSS · CitrixPatch nowKEVEPSS 73.03%Jul 19, 2017
High8.8Cisco IOS Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6744 · Cisco · IOS · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 7.29%Jul 17, 2017
High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6743 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 10.85%Jul 17, 2017
High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6742 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 21.42%Jul 17, 2017
High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6740 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 11.10%Jul 17, 2017
High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6739 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 10.85%Jul 17, 2017
High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6738 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 10.85%Jul 17, 2017
High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6737 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 45.24%Jul 17, 2017
High8.8Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityVuln · CVE-2017-6736 · Cisco · IOS and IOS XE Software · CISA KEV · CVE.org · FIRST EPSS · CiscoPatch nowKEVEPSS 70.35%Jul 17, 2017
High7.8Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2017-8570 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 89.89%Jul 11, 2017
Critical9.8Apache Struts 1 Improper Input Validation VulnerabilityVuln · CVE-2017-9791 · Apache · Struts · CISA KEV · CVE.org · FIRST EPSS · ApachePatch nowKEVEPSS 98.91%Jul 10, 2017
Critical9.8Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness VulnerabilityVuln · CVE-2017-9248 · Progress · ASP.NET AJAX and Sitefinity · CISA KEV · CVE.org · FIRST EPSS · Microsoft, ProgressPatch nowKEVEPSS 75.10%Jul 3, 2017
Critical9.8PHPUnit Command Injection VulnerabilityVuln · CVE-2017-9841 · PHPUnit · PHPUnit · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 100.00%Jun 27, 2017
Critical9.8Microsoft Windows Search Remote Code Execution VulnerabilityVuln · CVE-2017-8543 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 74.16%Jun 13, 2017