Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMozilla Firefox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.29%Apr 22, 2009
- High7.5Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1)…Check if you run itEPSS 8.54%Apr 17, 2009
- Medium5.8CVE-2009-1014 is listed by oracle.Check if you run itEPSS 1.79%Apr 15, 2009
- Medium6.4CVE-2009-1013 is listed by oracle.Check if you run itEPSS 2.24%Apr 15, 2009
- Medium5.5Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows…Check if you run itEPSS 1.26%Apr 15, 2009
- Medium4.0Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote authent…Check if you run itEPSS 1.44%Apr 15, 2009
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 2.36%Apr 14, 2009
- UnknownWindows RPCSS Service Isolation VulnerabilityPatch nowKEVEPSS 4.06%Apr 14, 2009
- UnknownWindows WMI Service Isolation VulnerabilityPatch nowKEVEPSS 2.74%Apr 14, 2009
- UnknownMicrosoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 Privilege EscalationPatch nowKEVEPSS 36.83%Apr 14, 2009
- Low2.6The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP clien…Check if you run itEPSS 7.26%Apr 9, 2009
- High8.8Microsoft Office PowerPoint Code Injection VulnerabilityPatch nowKEVEPSS 67.31%Apr 3, 2009
- Critical9.8phpMyAdmin Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.56%Mar 26, 2009
- UnknownJustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier Remote Code ExecutionPatch nowKEVEPSS 3.91%Mar 24, 2009
- High7.5SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter.Check if you run itEPSS 1.69%Mar 20, 2009
- UnknownApple quicktime Out-of-bounds WritePatch nowKEVEPSS 48.79%Mar 20, 2009
- Unknownwinzip winzip Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.69%Mar 20, 2009
- High8.8Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 96.63%Mar 19, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 t…Check if you run itEPSS 9.72%Mar 9, 2009
- Medium4.0sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression em…Check this weekEPSS 10.18%Mar 5, 2009
- Low2.6The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which…Check if you run itEPSS 4.17%Feb 26, 2009
- High8.8Microsoft Office Remote Code ExecutionPatch nowKEVEPSS 42.94%Feb 25, 2009
- Medium6.8The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause…Check if you run itEPSS 4.83%Feb 22, 2009
- UnknownAdobe Acrobat and Reader Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 87.83%Feb 20, 2009
- Medium5.0Microsoft Exchange Server Improper Input ValidationPatch nowKEVEPSS 26.24%Feb 10, 2009
Sort