Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect…Check if you run itEPSS 0.60%Sep 9, 2010
- Critical10.0The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location serv…Check if you run itEPSS 2.24%Sep 9, 2010
- Medium6.8Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service…Check if you run itEPSS 4.30%Sep 9, 2010
- High7.3Adobe Acrobat and Reader Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 81.38%Sep 9, 2010
- High7.2Linux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 3.75%Sep 8, 2010
- Medium4.3WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read acces…Check if you run itEPSS 1.60%Sep 7, 2010
- Critical9.3Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allow…Check if you run itEPSS 3.31%Sep 7, 2010
- High7.5Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 5.67%Aug 30, 2010
- Critical10.0Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before…Check if you run itEPSS 3.69%Aug 24, 2010
- Medium6.8Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruptio…Check if you run itEPSS 4.50%Aug 19, 2010
- Medium6.8FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possi…Check if you run itEPSS 4.20%Aug 19, 2010
- Medium6.8Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash…Check if you run itEPSS 5.84%Aug 19, 2010
- Medium6.8The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to caus…Check if you run itEPSS 5.11%Aug 19, 2010
- Unknowne107 bbcode/php.bb Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 4.87%Aug 19, 2010
- UnknownLinux Kernel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.76%Aug 12, 2010
- Critical9.8Adobe ColdFusion Directory Traversal VulnerabilityPatch nowKEVEPSS 99.75%Aug 11, 2010
- Medium6.9Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors i…Check if you run itEPSS 0.78%Aug 5, 2010
- Critical9.3Apple iphone_os Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 33.93%Aug 5, 2010
- UnknownThe WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and…Check this weekEPSS 57.54%Aug 4, 2010
- High8.8Red Hat Linux JBoss Seam 2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 83.40%Aug 4, 2010
- Low2.1The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving (1) the…Check if you run itEPSS 0.35%Jul 30, 2010
- High7.8Microsoft Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 89.62%Jul 21, 2010
- Medium6.4Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6,…Check if you run itEPSS 6.51%Jul 13, 2010
- Low3.5MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABAS…Check if you run itEPSS 9.01%Jul 13, 2010
- Critical9.3Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web site, which allows user-as…Check if you run itEPSS 3.90%Jul 8, 2010
Sort