Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3CVE-2008-1580 is listed by apple.Check if you run itEPSS 1.30%Jun 2, 2008
- UnknownAdobe Flash Player SWF Negative Scene Count VulnerabilityPatch nowKEVEPSS 92.50%May 28, 2008
- UnknownMicrosoft jet Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 28.27%May 13, 2008
- Medium4.6MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TAB…Check if you run itEPSS 2.59%May 5, 2008
- Medium4.3Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that triggers an out-of-bounds access, possibly due…Check if you run itEPSS 1.94%Apr 28, 2008
- Medium4.3Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write…Check if you run itEPSS 1.31%Apr 28, 2008
- Medium5.0Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of t…Check if you run itEPSS 1.41%Apr 28, 2008
- Medium6.8Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attacker…Check if you run itEPSS 4.75%Apr 17, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted…Check if you run itEPSS 2.89%Apr 17, 2008
- Medium6.8Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…Check if you run itEPSS 4.01%Apr 17, 2008
- Critical9.0Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote…Check if you run itEPSS 2.04%Apr 16, 2008
- Critical9.0Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknow…Check if you run itEPSS 2.37%Apr 16, 2008
- Critical9.0Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3;…Check if you run itEPSS 2.60%Apr 16, 2008
- Unknowncoppermine coppermine_photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.86%Apr 16, 2008
- Unknowncoppermine coppermine_photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.77%Apr 16, 2008
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 25.88%Mar 25, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via a frame that…Check if you run itEPSS 1.88%Mar 19, 2008
- Medium6.8Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript.Check if you run itEPSS 4.61%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object.Check if you run itEPSS 1.83%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the documen…Check if you run itEPSS 1.83%Mar 19, 2008
- Medium4.3WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripti…Check if you run itEPSS 2.80%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the wi…Check if you run itEPSS 1.83%Mar 19, 2008
- Low2.1WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows phys…Check if you run itEPSS 0.38%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vec…Check if you run itEPSS 1.83%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vec…Check if you run itEPSS 1.83%Mar 19, 2008
Sort