Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle, #21 and 9.0 Bu…Check if you run itEPSS 1.29%Jan 13, 2010
- Medium6.0Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allows remote authenticated users to affect confident…Check if you run itEPSS 0.96%Jan 13, 2010
- UnknownJava Runtime Environment (JRE) ZoneInfo Objects VulnerabilityPatch nowKEVEPSS 85.81%Jan 5, 2010
- High7.5Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.…Check this weekEPSS 69.55%Dec 30, 2009
- High7.8Adobe Acrobat and Reader Use-After-Free VulnerabilityPatch nowKEVEPSS 81.88%Dec 14, 2009
- Medium4.4CVE-2009-4030 is listed by oracle.Check if you run itEPSS 0.43%Nov 30, 2009
- Medium6.8The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth…Check if you run itEPSS 1.77%Nov 30, 2009
- Medium4.0mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does…Check this weekEPSS 16.26%Nov 30, 2009
- Medium6.0sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesy…Check if you run itEPSS 1.77%Nov 30, 2009
- UnknownHeap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of serviceCheck if you run itEPSS 5.17%Nov 20, 2009
- UnknownApache HTTP Server Improper Certificate ValidationPatch nowKEVEPSS 87.26%Nov 18, 2009
- Medium6.8The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom…Check if you run itEPSS 1.55%Nov 13, 2009
- High7.8Microsoft Excel Featheader Record Memory Corruption VulnerabilityPatch nowKEVEPSS 84.03%Nov 11, 2009
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 27.09%Nov 10, 2009
- UnknownMicrosoft Active Template Library (ATL) COM Initialization VulnerabilityPatch nowKEVEPSS 37.76%Nov 4, 2009
- Low3.6Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote aut…Check if you run itEPSS 1.65%Oct 22, 2009
- Low2.7Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to…Check if you run itEPSS 2.86%Oct 22, 2009
- Medium4.1Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to…Check if you run itEPSS 2.82%Oct 22, 2009
- Medium4.0Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remot…Check if you run itEPSS 1.96%Oct 22, 2009
- UnknownMicrosoft Internet Information Services (IIS) Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 90.91%Oct 19, 2009
- High8.8Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 86.65%Oct 13, 2009
- High7.5iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-m…Check if you run itEPSS 0.93%Sep 21, 2009
- Medium4.3Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.Check if you run itEPSS 4.21%Sep 21, 2009
- High7.8The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (N…Check if you run itEPSS 2.47%Sep 10, 2009
- Medium5.0The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Refe…Check if you run itEPSS 3.87%Sep 10, 2009
Sort