Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 6.66%Apr 10, 2007
- High7.5Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 4.37%Apr 10, 2007
- Unknownichitaro ichitaro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.45%Apr 10, 2007
- Low2.1MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a…Check if you run itEPSS 1.03%Mar 12, 2007
- UnknownMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into savingCheck if you run itEPSS 1.51%Feb 23, 2007
- UnknownClam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumpCheck if you run itEPSS 3.50%Feb 16, 2007
- High8.8Microsoft Office Excel Remote Code Execution VulnerabilityPatch nowKEVEPSS 43.24%Feb 2, 2007
- Medium4.3WebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML comments in TITLE elements, which allows remote attackers to conduct cros…Check if you run itEPSS 1.71%Jan 25, 2007
- UnknownMicrosoft Windows Integer Overflow or WraparoundPatch nowKEVEPSS 44.19%Jan 9, 2007
- UnknownMicrosoft XML Core Services VulnerabilityPatch nowKEVEPSS 77.59%Nov 14, 2006
- Unknownsendmail sendmail Use After FreePatch nowKEVEPSS 4.55%Aug 29, 2006
- Unknownjustsystem formliner Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.56%Aug 22, 2006
- Medium6.5MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which…Check this weekEPSS 13.57%Aug 18, 2006
- UnknownMicrosoft PowerPoint Mso.dll VulnerabilityPatch nowKEVEPSS 14.26%Aug 8, 2006
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 28.63%Jul 11, 2006
- Low2.1Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 befo…Check if you run itEPSS 0.65%Jul 10, 2006
- Medium5.0sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP reque…Check if you run itEPSS 5.06%May 5, 2006
- Medium5.0The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memor…Check this weekEPSS 36.35%May 5, 2006
- Medium5.0The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) vi…Check if you run itEPSS 1.89%Apr 21, 2006
- Medium5.1Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary co…Check this weekEPSS 13.91%Apr 21, 2006
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 68.34%Apr 11, 2006
- UnknownMicrosoft Office Out-of-bounds WritePatch nowKEVEPSS 14.21%Mar 14, 2006
- Medium4.6MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_r…Check if you run itEPSS 1.37%Feb 27, 2006
- Low2.1MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query…Check if you run itEPSS 0.80%Jan 22, 2006
- Medium5.0Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the m…Check if you run itEPSS 1.03%Dec 31, 2005
Sort