Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Excel Featheader Record Memory Corruption VulnerabilityPatch nowKEVEPSS 84.03%Nov 11, 2009
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 27.09%Nov 10, 2009
- UnknownMicrosoft Active Template Library (ATL) COM Initialization VulnerabilityPatch nowKEVEPSS 37.76%Nov 4, 2009
- Low3.6Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote aut…Check if you run itEPSS 1.65%Oct 22, 2009
- Low2.7Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to…Check if you run itEPSS 2.86%Oct 22, 2009
- Medium4.1Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to…Check if you run itEPSS 2.82%Oct 22, 2009
- Medium4.0Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remot…Check if you run itEPSS 1.96%Oct 22, 2009
- UnknownMicrosoft Internet Information Services (IIS) Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 90.91%Oct 19, 2009
- High8.8Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 86.65%Oct 13, 2009
- High7.5iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-m…Check if you run itEPSS 0.93%Sep 21, 2009
- Medium4.3Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.Check if you run itEPSS 4.21%Sep 21, 2009
- High7.8The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (N…Check if you run itEPSS 2.47%Sep 10, 2009
- Medium5.0The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Refe…Check if you run itEPSS 3.87%Sep 10, 2009
- Low2.1The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo de…Check if you run itEPSS 0.36%Sep 10, 2009
- High7.2Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the pa…Check if you run itEPSS 0.37%Sep 10, 2009
- Medium4.6The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock"…Check if you run itEPSS 0.26%Sep 10, 2009
- Low2.1The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might all…Check if you run itEPSS 0.34%Sep 10, 2009
- Medium6.8Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, al…Check if you run itEPSS 4.63%Sep 10, 2009
- UnknownUUSee UUUpgrade ActiveX control Remote File ManipulationPatch nowKEVEPSS 5.65%Sep 8, 2009
- Medium5.9Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 3.31%Aug 19, 2009
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 24.66%Aug 18, 2009
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 51.32%Aug 13, 2009
- Medium5.8Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms,…Check if you run itEPSS 2.59%Aug 12, 2009
- Medium6.5Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial o…Check if you run itEPSS 1.96%Aug 11, 2009
- UnknownSPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 Installation and Backup Unauthorized Activity VulnerabilityPatch nowKEVEPSS 6.59%Aug 6, 2009
Sort