Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive infor…Check if you run itEPSS 8.60%Nov 17, 2008
- Low1.9Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive in…Check if you run itEPSS 0.32%Nov 17, 2008
- Critical9.3Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 all…Check if you run itEPSS 8.34%Nov 17, 2008
- High7.8Adobe Reader and Acrobat Input Validation VulnerabilityPatch nowKEVEPSS 99.79%Nov 4, 2008
- UnknownMicrosoft Internet Information Services (IIS) Integer Overflow or WraparoundPatch nowKEVEPSS 46.27%Oct 29, 2008
- Critical9.8Microsoft Windows Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.75%Oct 23, 2008
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 59.00%Oct 15, 2008
- Low3.2Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1…Check if you run itEPSS 0.30%Oct 14, 2008
- Medium4.3Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affe…Check if you run itEPSS 1.15%Oct 14, 2008
- Low3.5Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote authenticated use…Check if you run itEPSS 0.90%Oct 14, 2008
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 and EP 9.0 allows remote au…Check if you run itEPSS 0.90%Oct 14, 2008
- Medium6.4Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affe…Check if you run itEPSS 2.23%Oct 14, 2008
- Critical10.0Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.…Check if you run itEPSS 6.57%Oct 10, 2008
- Low2.6Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the -…Check if you run itEPSS 7.05%Oct 6, 2008
- UnknownMicrosoft Excel Use of Uninitialized ResourcePatch nowKEVEPSS 57.91%Oct 1, 2008
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 6.51%Sep 26, 2008
- Medium4.6CVE-2008-4098 is listed by oracle.Check if you run itEPSS 1.62%Sep 18, 2008
- Medium4.6CVE-2008-4097 is listed by oracle.Check if you run itEPSS 1.85%Sep 18, 2008
- High8.1Cisco IOS Cross-Site Request Forgery VulnerabilityPatch nowKEVEPSS 33.87%Sep 18, 2008
- Medium5.0Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0…Check if you run itEPSS 7.08%Sep 16, 2008
- Critical10.0Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service…Check this weekEPSS 23.37%Sep 12, 2008
- Medium4.0MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, w…Check if you run itEPSS 6.46%Sep 11, 2008
- Critical9.3Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause…Check if you run itEPSS 5.95%Sep 11, 2008
- Critical9.8The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attack…Check if you run itEPSS 3.52%Sep 11, 2008
- Unknownjustsystems ichitaro Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.91%Sep 4, 2008
Sort