Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to…Check if you run itEPSS 1.92%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window p…Check if you run itEPSS 3.10%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive informati…Check if you run itEPSS 2.45%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does no…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credenti…Check if you run itEPSS 1.84%Sep 27, 2007
- Unknownxunlei web_thunder Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 3.88%Sep 20, 2007
- Critical9.8Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.39%Sep 18, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 98.48%Sep 7, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 72.98%Aug 25, 2007
- Medium6.8Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to exte…Check if you run itEPSS 1.34%Aug 20, 2007
- UnknownSkype Network Remote DoSPatch nowKEVEPSS 2.20%Aug 20, 2007
- Medium4.3Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop…Check if you run itEPSS 1.08%Aug 18, 2007
- Medium4.3WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support an…Check if you run itEPSS 2.44%Aug 3, 2007
- Critical9.3Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update…Check if you run itEPSS 6.53%Jul 23, 2007
- High7.5Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact.Check if you run itEPSS 1.56%Jul 12, 2007
- High7.8Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other do…Check if you run itEPSS 1.50%Jun 28, 2007
- Medium4.3Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript se…Check if you run itEPSS 2.55%Jun 25, 2007
- High7.1Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content…Check if you run itEPSS 2.56%Jun 21, 2007
- High7.8corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors rela…Check if you run itEPSS 3.08%Jun 19, 2007
- Critical10.0Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js sc…Check if you run itEPSS 3.49%May 24, 2007
- Low3.5MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.Check if you run itEPSS 1.78%May 16, 2007
- Medium6.0The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER s…Check if you run itEPSS 1.88%May 16, 2007
- Low1.9Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaS…Check if you run itEPSS 0.74%May 9, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 77.66%May 8, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
Sort