Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all doma…Check if you run itEPSS 0.65%Dec 28, 2007
- UnknownMicrosoft Internet Explorer 5.01 through 7 DHTML Object Memory Corruption VulnerabilityPatch nowKEVEPSS 28.03%Dec 20, 2007
- Critical9.3Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary c…Check if you run itEPSS 5.59%Dec 19, 2007
- Medium4.3WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of…Check if you run itEPSS 3.10%Dec 19, 2007
- Unknownjustsystem ichitaro Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.09%Dec 18, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.90%Dec 11, 2007
- Medium5.0The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL…Check if you run itEPSS 2.96%Dec 10, 2007
- Low3.5MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authe…Check if you run itEPSS 2.23%Dec 10, 2007
- Medium5.8MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of tabl…Check if you run itEPSS 2.13%Dec 10, 2007
- Critical9.3Apple quicktime Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 41.77%Nov 29, 2007
- High7.5The default configuration of Safari in Apple Mac OS X 10.4 through 10.4.10 adds a private key to the keychain with permissions that allow other applications to access…Check if you run itEPSS 1.76%Nov 15, 2007
- Medium4.3Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to conduct cross-site scripting (XSS) attacks by causing…Check if you run itEPSS 1.88%Nov 15, 2007
- Medium4.3The tabbed browsing feature in Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to spoof HTTP authenticat…Check if you run itEPSS 2.04%Nov 15, 2007
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 53.83%Nov 13, 2007
- Unknownssreader ultra_star_reader Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.84%Nov 5, 2007
- Unknownourgame.com globallink Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 11.70%Oct 30, 2007
- UnknownAdobe Acrobat and Reader Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 20.43%Oct 26, 2007
- Unknownmake_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line,Check if you run itEPSS 0.29%Oct 23, 2007
- Critical9.0Unspecified vulnerability in the HCM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle 13 9.0 Bundle 3 has unknown impact and remote at…Check if you run itEPSS 2.30%Oct 17, 2007
- Medium6.5Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49.05 has unknown impact and r…Check if you run itEPSS 1.89%Oct 17, 2007
- High7.5Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown imp…Check if you run itEPSS 3.20%Oct 17, 2007
- Critical9.3Unspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service (applicati…Check if you run itEPSS 4.90%Oct 14, 2007
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 29.17%Oct 9, 2007
- Medium6.8Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers…Check if you run itEPSS 2.57%Sep 27, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to…Check if you run itEPSS 1.92%Sep 27, 2007
Sort