Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary c…Check this weekEPSS 78.37%Sep 22, 2003
- UnknownWindows 2000 SP3 and SP4 PerformScmStage function VulnerabilityPatch nowKEVEPSS 58.81%Aug 1, 2003
- UnknownMicrosoft data_engine Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 84.75%Aug 1, 2003
- High7.5Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certifica…Check if you run itEPSS 2.06%Jun 16, 2003
- Medium5.0Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.Check if you run itEPSS 0.77%Jun 9, 2003
- Critical9.0MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a con…Check this weekEPSS 44.83%Mar 24, 2003
- High7.5Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.Check if you run itEPSS 1.83%Mar 3, 2003
- Medium5.0Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.Check if you run itEPSS 2.99%Feb 19, 2003
- Medium5.0The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Ma…Check if you run itEPSS 1.27%Dec 31, 2002
- High7.5The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activ…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.5The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.2Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.Check if you run itEPSS 3.17%Dec 31, 2002
- High7.5The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthoriz…Check this weekEPSS 16.12%Dec 31, 2002
- UnknownMicrosoft Internet Information Services (IIS) Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 16.05%Dec 31, 2002
- Critical10.0Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interfac…Check if you run itEPSS 9.06%Dec 26, 2002
- High7.5Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote at…Check if you run itEPSS 2.97%Dec 26, 2002
- High7.5filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to ex…Check if you run itEPSS 4.92%Dec 26, 2002
- Critical10.0jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows rem…Check if you run itEPSS 8.20%Dec 26, 2002
- Critical10.0Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be use…Check if you run itEPSS 3.68%Dec 26, 2002
- Medium6.2Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demo…Check if you run itEPSS 0.33%Dec 26, 2002
- High7.5libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_…Check if you run itEPSS 6.78%Dec 23, 2002
- High7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.Check this weekEPSS 23.51%Dec 23, 2002
- High7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-characte…Check this weekEPSS 20.45%Dec 23, 2002
- Medium5.0Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysq…Check if you run itEPSS 3.64%Dec 23, 2002
- High7.5Common Unix Printing System (CUPS) memcpy() calls VulnerabilityPatch nowKEVEPSS 15.47%Dec 19, 2002
Sort