Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownnetshinesoftware com_netinvoice Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.84%Nov 16, 2010
- Critical9.8Adobe ColdFusion Directory Traversal VulnerabilityPatch nowKEVEPSS 99.75%Aug 11, 2010
- UnknownAtlassian Jira Server and Data Center Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.44%Apr 20, 2010
- UnknownMultiple Products libmodplug MED File VulnerabilityPatch nowKEVEPSS 4.67%Apr 27, 2009
- Critical9.8phpMyAdmin Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.56%Mar 26, 2009
- High8.1Cisco IOS Cross-Site Request Forgery VulnerabilityPatch nowKEVEPSS 33.87%Sep 18, 2008
- UnknownJoomla! components/com_user/models/reset.php First Enabled User VulnerabilityPatch nowKEVEPSS 9.47%Aug 15, 2008
- Unknowndeerfield visnetic_mail_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.57%Dec 27, 2005
- Medium6.3SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs pCheck if you run itEPSS 1.39%Dec 19, 2005
- Medium5.3Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, whichCheck if you run itEPSS 1.91%May 20, 2005
- Critical9.8k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leCheck if you run itEPSS 7.16%Jul 7, 2004
- High7.5Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.Check if you run itEPSS 1.83%Mar 3, 2003
- Critical10.0Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be use…Check if you run itEPSS 3.68%Dec 26, 2002
- Medium5.0Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration i…Check if you run itEPSS 1.54%Dec 11, 2002
- UnknownKerberos v4compatibility Administration Daemon (kadmind4) Remote Code ExecutionPatch nowKEVEPSS 15.10%Oct 22, 2002
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.92%Mar 13, 2002
- Medium4.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.Check if you run itEPSS 0.61%Oct 2, 2001
- UnknownMicrosoft index_server Out-of-bounds WritePatch nowKEVEPSS 96.73%Jul 19, 2001
- High7.2MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and poss…Check if you run itEPSS 0.53%Jan 19, 2001
Sort