Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute a…Check this weekEPSS 12.41%May 2, 2005
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTIO…Check this weekEPSS 17.84%May 2, 2005
- Medium4.3Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HT…Check if you run itEPSS 1.26%May 2, 2005
- Medium5.0The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs…Check if you run itEPSS 1.65%May 2, 2005
- Critical9.8Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width anCheck if you run itEPSS 3.38%Apr 15, 2005
- Medium4.6The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrar…Check if you run itEPSS 0.60%Apr 14, 2005
- UnknownMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.Check if you run itEPSS 2.55%Apr 14, 2005
- Medium5.0MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed…Check if you run itEPSS 2.53%Mar 15, 2005
- UnknownInteger underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppCheck if you run itEPSS 2.70%Mar 1, 2005
- Medium6.8Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other…Check if you run itEPSS 2.43%Feb 9, 2005
- UnknownMicrosoft Internet Explorer Drag-and-Drop VulnerabilityPatch nowKEVEPSS 59.78%Feb 8, 2005
- UnknownDHTML Editing Component ActiveX Control VulnerabilityPatch nowKEVEPSS 26.92%Feb 8, 2005
- UnknownMicrosoft asp.net Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.70%Feb 8, 2005
- UnknownMicrosoft Internet Explorer HTML Help ActiveX control Cross Domain VulnerabilityPatch nowKEVEPSS 44.98%Jan 11, 2005
- High7.5CVE-2004-1314 is listed by apple.Check if you run itEPSS 2.36%Jan 10, 2005
- UnknownStack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.Check this weekEPSS 11.40%Jan 10, 2005
- Medium5.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code…Check if you run itEPSS 1.65%Jan 10, 2005
- High7.5CVE-2004-1122 is listed by apple.Check if you run itEPSS 2.34%Jan 10, 2005
- Medium5.0MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.Check if you run itEPSS 3.72%Jan 10, 2005
- UnknownCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercaCheck if you run itEPSS 2.07%Dec 31, 2004
- Medium5.0Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number…Check if you run itEPSS 5.57%Dec 31, 2004
- Medium5.9Cisco IOS Denial-of-Service VulnerabilityPatch nowKEVEPSS 4.84%Dec 30, 2004
- Unknownavaya ip600_media_servers Out-of-bounds WritePatch nowKEVEPSS 67.06%Dec 1, 2004
- Medium5.0The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large s…Check if you run itEPSS 7.04%Nov 23, 2004
- UnknownThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake tCheck if you run itEPSS 9.54%Nov 23, 2004
Sort