Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTP-Link tl-r600vpn_firmware Improper Input ValidationPatch nowKEVEPSS 23.06%Jan 12, 2022
- Unknownsybase easerver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 63.61%Jan 12, 2022
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.96%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Sep 29, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- Medium6.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial o…Check if you run itEPSS 6.62%Jan 30, 2020
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- UnknownGNU Bourne-Again Shell (Bash) Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.33%Mar 1, 2018
- High8.8GNU Bash OS Command Injection VulnerabilityPatch nowKEVEPSS 99.68%Sep 30, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 99.94%Sep 24, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Sep 24, 2014
- UnknownApache HTTP Server Uncontrolled Resource ConsumptionPatch nowKEVEPSS 98.83%Aug 24, 2011
- UnknownApache subversion NULL Pointer DereferencePatch nowKEVEPSS 8.48%Jun 6, 2011
- UnknownFCKEditor Multiple File Extension Handling PHP File Upload VulnerabilityPatch nowKEVEPSS 8.00%Apr 19, 2011
- UnknownApache HTTP Server Improper Certificate ValidationPatch nowKEVEPSS 87.26%Nov 18, 2009
- Unknowncoppermine coppermine_photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.77%Apr 16, 2008
- UnknownApache Chunk-encoded HTTP Request Arbitrary Code ExecutionPatch nowKEVEPSS 94.91%Jun 17, 2002
- Critical9.8Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is n…Check if you run itEPSS 8.16%Oct 18, 2001
- Medium5.0A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET re…Check this weekEPSS 35.91%Jun 3, 1999
- Critical10.0Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains acc…Check if you run itEPSS 3.68%Sep 19, 1997
- Medium5.0Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.Check if you run itEPSS 2.10%Jul 23, 1997
146 records · page 6 of 6
PreviousNext