Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other…Check if you run itEPSS 2.43%Feb 9, 2005
- UnknownMicrosoft Internet Explorer Drag-and-Drop VulnerabilityPatch nowKEVEPSS 59.78%Feb 8, 2005
- UnknownDHTML Editing Component ActiveX Control VulnerabilityPatch nowKEVEPSS 26.92%Feb 8, 2005
- UnknownMicrosoft asp.net Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.70%Feb 8, 2005
- UnknownMicrosoft Internet Explorer HTML Help ActiveX control Cross Domain VulnerabilityPatch nowKEVEPSS 44.98%Jan 11, 2005
- High7.5CVE-2004-1314 is listed by apple.Check if you run itEPSS 2.36%Jan 10, 2005
- UnknownStack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.Check this weekEPSS 11.40%Jan 10, 2005
- Medium5.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code…Check if you run itEPSS 1.65%Jan 10, 2005
- High7.5CVE-2004-1122 is listed by apple.Check if you run itEPSS 2.34%Jan 10, 2005
- Medium5.0MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.Check if you run itEPSS 3.72%Jan 10, 2005
- UnknownCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercaCheck if you run itEPSS 2.07%Dec 31, 2004
- Medium5.0Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number…Check if you run itEPSS 5.57%Dec 31, 2004
- Medium5.9Cisco IOS Denial-of-Service VulnerabilityPatch nowKEVEPSS 4.84%Dec 30, 2004
- Unknownavaya ip600_media_servers Out-of-bounds WritePatch nowKEVEPSS 67.06%Dec 1, 2004
- Medium5.0The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large s…Check if you run itEPSS 7.04%Nov 23, 2004
- UnknownThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake tCheck if you run itEPSS 9.54%Nov 23, 2004
- UnknownMicrosoft Internet Explorer Popup.show Method VulnerabilityPatch nowKEVEPSS 48.73%Nov 9, 2004
- UnknownMicrosoft Internet Explorer Arbitrary Program Installation VulnerabilityPatch nowKEVEPSS 33.99%Nov 9, 2004
- UnknownMicrosoft Internet Explorer Similar Method Name Redirection Cross Domain VulnerabilityPatch nowKEVEPSS 39.78%Nov 9, 2004
- Low2.6MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.Check if you run itEPSS 4.90%Nov 3, 2004
- Critical10.0Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possi…Check if you run itEPSS 9.80%Nov 3, 2004
- High7.5MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target tabl…Check this weekEPSS 22.35%Nov 3, 2004
- Medium5.0Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.Check if you run itEPSS 4.43%Nov 1, 2004
- UnknownDouble free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.Check if you run itEPSS 6.99%Oct 20, 2004
- UnknownBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.Check if you run itEPSS 1.61%Oct 20, 2004
Sort