Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownlhaca file_archiver Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.70%Jul 6, 2007
- High8.5CVE-2007-3514 is listed by apple.Check if you run itEPSS 1.33%Jul 3, 2007
- High7.8Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other do…Check if you run itEPSS 1.50%Jun 28, 2007
- Critical9.3Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…Check if you run itEPSS 5.54%Jun 25, 2007
- Medium4.3CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers v…Check if you run itEPSS 7.06%Jun 25, 2007
- Medium4.3Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript se…Check if you run itEPSS 2.55%Jun 25, 2007
- Critical9.3WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary co…Check if you run itEPSS 7.29%Jun 25, 2007
- High7.1Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content…Check if you run itEPSS 2.56%Jun 21, 2007
- High7.8corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors rela…Check if you run itEPSS 3.08%Jun 19, 2007
- Medium4.3Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable,…Check if you run itEPSS 1.01%Jun 19, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that incl…Check if you run itEPSS 1.29%Jun 14, 2007
- High7.5CVE-2007-3187 is listed by apple.Check if you run itEPSS 3.22%Jun 12, 2007
- Critical9.3Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated us…Check if you run itEPSS 4.93%Jun 12, 2007
- High7.8Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that trigger memory co…Check if you run itEPSS 1.88%Jun 12, 2007
- Critical10.0Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js sc…Check if you run itEPSS 3.49%May 24, 2007
- Low3.5MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.Check if you run itEPSS 1.78%May 16, 2007
- Medium6.0The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER s…Check if you run itEPSS 1.88%May 16, 2007
- Medium4.0The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (cr…Check this weekEPSS 11.31%May 10, 2007
- Low1.9Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaS…Check if you run itEPSS 0.74%May 9, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 77.66%May 8, 2007
- UnknownWord Document Stream VulnerabilityPatch nowKEVEPSS 21.13%May 8, 2007
- Unknownwildbits mygallery Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 62.87%Apr 29, 2007
- UnknownOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KECheck if you run itEPSS 2.40%Apr 25, 2007
- High7.6Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via par…Check this weekEPSS 83.80%Apr 24, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
Sort