Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does no…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credenti…Check if you run itEPSS 1.84%Sep 27, 2007
- Unknownxunlei web_thunder Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 3.88%Sep 20, 2007
- Critical9.8Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.39%Sep 18, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 98.48%Sep 7, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 72.98%Aug 25, 2007
- Medium6.8Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to exte…Check if you run itEPSS 1.34%Aug 20, 2007
- UnknownSkype Network Remote DoSPatch nowKEVEPSS 2.20%Aug 20, 2007
- Medium4.3Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop…Check if you run itEPSS 1.08%Aug 18, 2007
- Medium4.3WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support an…Check if you run itEPSS 2.44%Aug 3, 2007
- Critical9.3Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update…Check if you run itEPSS 6.53%Jul 23, 2007
- High7.5Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact.Check if you run itEPSS 1.56%Jul 12, 2007
- High7.8Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other do…Check if you run itEPSS 1.50%Jun 28, 2007
- Medium4.3Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript se…Check if you run itEPSS 2.55%Jun 25, 2007
- High7.1Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content…Check if you run itEPSS 2.56%Jun 21, 2007
- High7.8corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors rela…Check if you run itEPSS 3.08%Jun 19, 2007
- Critical10.0Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js sc…Check if you run itEPSS 3.49%May 24, 2007
- Low3.5MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.Check if you run itEPSS 1.78%May 16, 2007
- Medium6.0The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER s…Check if you run itEPSS 1.88%May 16, 2007
- Low1.9Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaS…Check if you run itEPSS 0.74%May 9, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 77.66%May 8, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
- Unknownsuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- Medium5.0The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows…Check if you run itEPSS 2.55%Apr 10, 2007
- Critical10.0Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspe…Check if you run itEPSS 6.66%Apr 10, 2007
Sort