Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a con…Check this weekEPSS 44.83%Mar 24, 2003
- High7.5Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.Check if you run itEPSS 1.83%Mar 3, 2003
- Medium5.0Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.Check if you run itEPSS 2.99%Feb 19, 2003
- Medium5.0The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Ma…Check if you run itEPSS 1.27%Dec 31, 2002
- High7.5The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activ…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.5The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.2Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.Check if you run itEPSS 3.17%Dec 31, 2002
- High7.5The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthoriz…Check this weekEPSS 16.12%Dec 31, 2002
- UnknownMicrosoft Internet Information Services (IIS) Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 16.05%Dec 31, 2002
- Critical10.0Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interfac…Check if you run itEPSS 9.06%Dec 26, 2002
- High7.5Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote at…Check if you run itEPSS 2.97%Dec 26, 2002
- High7.5filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to ex…Check if you run itEPSS 4.92%Dec 26, 2002
- Critical10.0jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows rem…Check if you run itEPSS 8.20%Dec 26, 2002
- Critical10.0Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be use…Check if you run itEPSS 3.68%Dec 26, 2002
- Medium6.2Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demo…Check if you run itEPSS 0.33%Dec 26, 2002
- High7.5libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_…Check if you run itEPSS 6.78%Dec 23, 2002
- High7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.Check this weekEPSS 23.51%Dec 23, 2002
- High7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-characte…Check this weekEPSS 20.45%Dec 23, 2002
- Medium5.0Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysq…Check if you run itEPSS 3.64%Dec 23, 2002
- High7.5Common Unix Printing System (CUPS) memcpy() calls VulnerabilityPatch nowKEVEPSS 15.47%Dec 19, 2002
- Critical9.8Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long…Check if you run itEPSS 7.08%Dec 18, 2002
- Low2.1Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.Check if you run itEPSS 0.33%Dec 11, 2002
- Medium4.6Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem.Check if you run itEPSS 0.31%Dec 11, 2002
- Medium4.6Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."Check if you run itEPSS 0.32%Dec 11, 2002
- Medium5.0Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration i…Check if you run itEPSS 1.54%Dec 11, 2002
Sort