Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The default configuration of Safari in Apple Mac OS X 10.4 through 10.4.10 adds a private key to the keychain with permissions that allow other applications to access…Check if you run itEPSS 1.76%Nov 15, 2007
- Medium4.3Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to conduct cross-site scripting (XSS) attacks by causing…Check if you run itEPSS 1.88%Nov 15, 2007
- Medium4.3The tabbed browsing feature in Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to spoof HTTP authenticat…Check if you run itEPSS 2.04%Nov 15, 2007
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 53.83%Nov 13, 2007
- Unknownssreader ultra_star_reader Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.84%Nov 5, 2007
- Unknownourgame.com globallink Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 11.70%Oct 30, 2007
- UnknownAdobe Acrobat and Reader Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 20.43%Oct 26, 2007
- Unknownmake_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line,Check if you run itEPSS 0.29%Oct 23, 2007
- Critical9.0Unspecified vulnerability in the HCM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle 13 9.0 Bundle 3 has unknown impact and remote at…Check if you run itEPSS 2.30%Oct 17, 2007
- Medium6.5Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49.05 has unknown impact and r…Check if you run itEPSS 1.89%Oct 17, 2007
- High7.5Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown imp…Check if you run itEPSS 3.20%Oct 17, 2007
- Critical9.3Unspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service (applicati…Check if you run itEPSS 4.90%Oct 14, 2007
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 29.17%Oct 9, 2007
- Medium6.8Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers…Check if you run itEPSS 2.57%Sep 27, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to…Check if you run itEPSS 1.92%Sep 27, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows re…Check if you run itEPSS 3.10%Sep 27, 2007
- Medium6.8Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the us…Check if you run itEPSS 1.65%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window p…Check if you run itEPSS 3.10%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive informati…Check if you run itEPSS 2.45%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does no…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credenti…Check if you run itEPSS 1.84%Sep 27, 2007
- High7.5Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via…Check if you run itEPSS 2.81%Sep 27, 2007
- Unknownxunlei web_thunder Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 3.88%Sep 20, 2007
- Critical9.8Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.39%Sep 18, 2007
Sort