Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long…Check if you run itEPSS 7.08%Dec 18, 2002
- Low2.1Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.Check if you run itEPSS 0.33%Dec 11, 2002
- Medium4.6Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem.Check if you run itEPSS 0.31%Dec 11, 2002
- Medium4.6Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."Check if you run itEPSS 0.32%Dec 11, 2002
- Medium5.0Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration i…Check if you run itEPSS 1.54%Dec 11, 2002
- Medium4.6Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."Check if you run itEPSS 0.32%Dec 11, 2002
- Medium5.0The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers…Check if you run itEPSS 2.50%Nov 12, 2002
- Medium5.0IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial…Check if you run itEPSS 2.47%Nov 4, 2002
- UnknownKerberos v4compatibility Administration Daemon (kadmind4) Remote Code ExecutionPatch nowKEVEPSS 15.10%Oct 22, 2002
- High7.8Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "data…Check if you run itEPSS 1.45%Oct 11, 2002
- Medium6.8The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Wind…Check this weekEPSS 15.76%Oct 4, 2002
- Medium5.0The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.Check this weekEPSS 36.20%Aug 12, 2002
- High7.5Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2…Check this weekEPSS 89.82%Aug 12, 2002
- High7.5OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to…Check if you run itEPSS 8.17%Aug 12, 2002
- High7.5SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing…Check if you run itEPSS 4.27%Jul 11, 2002
- UnknownApache Chunk-encoded HTTP Request Arbitrary Code ExecutionPatch nowKEVEPSS 95.23%Jun 17, 2002
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.92%Mar 13, 2002
- Low2.1Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtai…Check if you run itEPSS 0.34%Dec 31, 2001
- Low3.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.Check if you run itEPSS 0.34%Dec 6, 2001
- High7.5Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, whic…Check if you run itEPSS 2.09%Dec 6, 2001
- Critical9.8Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is n…Check if you run itEPSS 8.16%Oct 18, 2001
- High7.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus…Check if you run itEPSS 0.47%Oct 17, 2001
- Medium4.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.Check if you run itEPSS 0.61%Oct 2, 2001
- High7.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the conte…Check if you run itEPSS 3.08%Sep 11, 2001
- High7.2Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in…Check if you run itEPSS 1.62%Aug 14, 2001
Sort