Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attacCheck if you run itEPSS 0.84%Sep 16, 2005
- Critical9.8HP OpenView Network Node Manager Remote Code Execution VulnerabilityPatch nowKEVEPSS 74.59%Sep 2, 2005
- UnknownMicrosoft Internet Explorer HTML E-mail Feature VulnerabilityPatch nowKEVEPSS 11.21%Aug 25, 2005
- UnknownMicrosoft IIS 4.0 and 5.0 Folder Traversal VulnerabilityPatch nowKEVEPSS 63.28%Aug 25, 2005
- Medium5.1Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitr…Check if you run itEPSS 4.30%Aug 19, 2005
- Low2.6Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.Check if you run itEPSS 1.06%Aug 19, 2005
- High7.5Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows…Check if you run itEPSS 4.77%Aug 19, 2005
- Medium5.0Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that define…Check if you run itEPSS 3.10%Aug 17, 2005
- Medium5.0The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete…Check if you run itEPSS 2.81%Aug 16, 2005
- High8.5MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibl…Check if you run itEPSS 4.73%Aug 16, 2005
- Medium4.6Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who ca…Check if you run itEPSS 2.33%Aug 16, 2005
- UnknownVERITAS Backup Exec NDMP Agent Hardcoded PasswordPatch nowKEVEPSS 87.03%Aug 12, 2005
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 93.01%Aug 9, 2005
- Critical9.8Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.Check this weekEPSS 11.01%Jul 18, 2005
- Low2.6Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box fr…Check if you run itEPSS 1.85%Jul 13, 2005
- UnknownMicrosoft IE 5.01 SP4 up to 6 javaprxy.dll COM Instantiation Heap Corruption VulnerabilityPatch nowKEVEPSS 61.37%Jul 12, 2005
- UnknownMicrosoft image_color_management Out-of-bounds WritePatch nowKEVEPSS 49.92%Jul 12, 2005
- UnknownVeritas Backup Exec Agent Out-of-bounds WritePatch nowKEVEPSS 86.37%Jun 24, 2005
- Medium5.3Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, whichCheck if you run itEPSS 1.91%May 20, 2005
- Medium4.6mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allow…Check if you run itEPSS 0.61%May 17, 2005
- Low2.6Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.Check if you run itEPSS 2.20%May 3, 2005
- Medium4.7Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissionCheck if you run itEPSS 0.31%May 2, 2005
- Medium5.0AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XM…Check if you run itEPSS 1.82%May 2, 2005
- Medium5.0phpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%May 2, 2005
- Low2.1MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE priv…Check if you run itEPSS 1.64%May 2, 2005
Sort