Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to…Check if you run itEPSS 8.17%Aug 12, 2002
- High7.5SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing…Check if you run itEPSS 4.27%Jul 11, 2002
- UnknownApache Chunk-encoded HTTP Request Arbitrary Code ExecutionPatch nowKEVEPSS 95.23%Jun 17, 2002
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.92%Mar 13, 2002
- Low2.1Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtai…Check if you run itEPSS 0.34%Dec 31, 2001
- Low3.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.Check if you run itEPSS 0.34%Dec 6, 2001
- High7.5Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, whic…Check if you run itEPSS 2.09%Dec 6, 2001
- Critical9.8Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is n…Check if you run itEPSS 8.16%Oct 18, 2001
- High7.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus…Check if you run itEPSS 0.47%Oct 17, 2001
- Medium4.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.Check if you run itEPSS 0.61%Oct 2, 2001
- High7.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the conte…Check if you run itEPSS 3.08%Sep 11, 2001
- High7.2Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in…Check if you run itEPSS 1.62%Aug 14, 2001
- Medium5.0Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending t…Check if you run itEPSS 2.23%Jul 21, 2001
- Medium5.0Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.Check if you run itEPSS 2.70%Jul 21, 2001
- Medium5.0Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requ…Check if you run itEPSS 2.08%Jul 21, 2001
- Medium5.0Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.Check if you run itEPSS 2.08%Jul 21, 2001
- Medium5.0Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers…Check if you run itEPSS 3.46%Jul 21, 2001
- Critical10.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the co…Check this weekEPSS 85.20%Jul 21, 2001
- Medium5.0Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet conne…Check if you run itEPSS 2.10%Jul 21, 2001
- UnknownMicrosoft index_server Out-of-bounds WritePatch nowKEVEPSS 96.73%Jul 19, 2001
- Unknownmit kerberos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 38.75%Jul 18, 2001
- High7.5Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PRO…Check if you run itEPSS 6.31%Jul 17, 2001
- High7.5Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodin…Check if you run itEPSS 5.80%Jul 16, 2001
- High7.5Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the P…Check if you run itEPSS 8.78%Jul 16, 2001
- High7.5Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attacker…Check this weekEPSS 24.45%Jul 2, 2001
Sort