Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors rela…Check if you run itEPSS 3.08%Jun 19, 2007
- Medium4.3Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable,…Check if you run itEPSS 1.01%Jun 19, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that incl…Check if you run itEPSS 1.29%Jun 14, 2007
- High7.5CVE-2007-3187 is listed by apple.Check if you run itEPSS 3.22%Jun 12, 2007
- Critical9.3Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated us…Check if you run itEPSS 4.93%Jun 12, 2007
- High7.8Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that trigger memory co…Check if you run itEPSS 1.88%Jun 12, 2007
- Critical10.0Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js sc…Check if you run itEPSS 3.49%May 24, 2007
- Low3.5MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.Check if you run itEPSS 1.78%May 16, 2007
- Medium6.0The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER s…Check if you run itEPSS 1.88%May 16, 2007
- Medium4.0The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (cr…Check this weekEPSS 11.31%May 10, 2007
- Low1.9Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaS…Check if you run itEPSS 0.74%May 9, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 77.66%May 8, 2007
- UnknownWord Document Stream VulnerabilityPatch nowKEVEPSS 21.13%May 8, 2007
- Unknownwildbits mygallery Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 62.87%Apr 29, 2007
- UnknownOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KECheck if you run itEPSS 2.40%Apr 25, 2007
- High7.6Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via par…Check this weekEPSS 83.80%Apr 24, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
- Critical10.0Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.Check if you run itEPSS 3.02%Apr 18, 2007
- Unknownsuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- Unknownphpwiki phpwiki Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.28%Apr 12, 2007
- Medium5.0The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows…Check if you run itEPSS 2.55%Apr 10, 2007
- Critical10.0Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspe…Check if you run itEPSS 6.66%Apr 10, 2007
- Critical10.0Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 6.66%Apr 10, 2007
Sort