Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.6Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.Check if you run itEPSS 2.20%May 3, 2005
- Medium4.7Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissionCheck if you run itEPSS 0.31%May 2, 2005
- Medium5.0AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XM…Check if you run itEPSS 1.82%May 2, 2005
- Medium5.0phpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%May 2, 2005
- Low2.1MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE priv…Check if you run itEPSS 1.64%May 2, 2005
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute a…Check this weekEPSS 12.41%May 2, 2005
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTIO…Check this weekEPSS 17.84%May 2, 2005
- Medium4.3Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HT…Check if you run itEPSS 1.26%May 2, 2005
- Medium5.0The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs…Check if you run itEPSS 1.65%May 2, 2005
- Critical9.8Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width anCheck if you run itEPSS 3.38%Apr 15, 2005
- Medium4.6The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrar…Check if you run itEPSS 0.60%Apr 14, 2005
- UnknownMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.Check if you run itEPSS 2.55%Apr 14, 2005
- Medium5.0MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed…Check if you run itEPSS 2.53%Mar 15, 2005
- UnknownInteger underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppCheck if you run itEPSS 2.70%Mar 1, 2005
- Medium6.8Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other…Check if you run itEPSS 2.43%Feb 9, 2005
- UnknownMicrosoft Internet Explorer Drag-and-Drop VulnerabilityPatch nowKEVEPSS 59.78%Feb 8, 2005
- UnknownDHTML Editing Component ActiveX Control VulnerabilityPatch nowKEVEPSS 26.92%Feb 8, 2005
- UnknownMicrosoft asp.net Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.70%Feb 8, 2005
- UnknownMicrosoft Internet Explorer HTML Help ActiveX control Cross Domain VulnerabilityPatch nowKEVEPSS 44.98%Jan 11, 2005
- High7.5CVE-2004-1314 is listed by apple.Check if you run itEPSS 2.36%Jan 10, 2005
- UnknownStack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.Check this weekEPSS 11.40%Jan 10, 2005
- Medium5.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code…Check if you run itEPSS 1.65%Jan 10, 2005
- High7.5CVE-2004-1122 is listed by apple.Check if you run itEPSS 2.34%Jan 10, 2005
- Medium5.0MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.Check if you run itEPSS 3.72%Jan 10, 2005
- UnknownCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercaCheck if you run itEPSS 2.07%Dec 31, 2004
Sort