Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.Check if you run itEPSS 3.02%Apr 18, 2007
- Unknownsuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- Unknownphpwiki phpwiki Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.28%Apr 12, 2007
- Medium5.0The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows…Check if you run itEPSS 2.55%Apr 10, 2007
- Critical10.0Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspe…Check if you run itEPSS 6.66%Apr 10, 2007
- Critical10.0Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 6.66%Apr 10, 2007
- High7.5Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 4.37%Apr 10, 2007
- Medium5.0CVE-2007-1913 is listed by apple.Check if you run itEPSS 2.22%Apr 10, 2007
- Unknownichitaro ichitaro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.45%Apr 10, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 72.98%Apr 3, 2007
- UnknownMicrosoft Windows Cursor, Animated Cursor, and Icon Processing VulnerabilityPatch nowKEVEPSS 54.60%Mar 30, 2007
- Low2.1MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a…Check if you run itEPSS 1.03%Mar 12, 2007
- UnknownMutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing between signed and unsigned portions ofCheck if you run itEPSS 2.83%Mar 6, 2007
- UnknownMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into savingCheck if you run itEPSS 1.51%Feb 23, 2007
- UnknownClam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumpCheck if you run itEPSS 3.50%Feb 16, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 2.74%Feb 13, 2007
- UnknownWord Malformed Function VulnerabilityPatch nowKEVEPSS 39.20%Feb 13, 2007
- UnknownMicrosoft Word Count VulnerabilityPatch nowKEVEPSS 41.27%Feb 13, 2007
- UnknownWord Malformed Data Structures VulnerabilityPatch nowKEVEPSS 32.16%Feb 13, 2007
- UnknownWord Malformed String VulnerabilityPatch nowKEVEPSS 32.01%Feb 13, 2007
- High8.8Microsoft Office Excel Remote Code Execution VulnerabilityPatch nowKEVEPSS 43.24%Feb 2, 2007
- High7.1Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (…Check this weekEPSS 10.18%Feb 1, 2007
- High7.1Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in fi…Check if you run itEPSS 2.55%Feb 1, 2007
Sort