Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows phys…Check if you run itEPSS 0.38%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vec…Check if you run itEPSS 1.83%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vec…Check if you run itEPSS 1.83%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.Check if you run itEPSS 3.02%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTM…Check if you run itEPSS 1.48%Mar 19, 2008
- Unknowngom_player gom_player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 71.51%Mar 3, 2008
- Unknownaltdo convert_mp3_master Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 37.26%Mar 3, 2008
- UnknownAmerica Online SuperBuddy ActiveX Control Code ExecutionPatch nowKEVEPSS 8.50%Mar 3, 2008
- Medium6.8CVE-2008-0894 is listed by apple.Check if you run itEPSS 1.20%Feb 21, 2008
- High7.1CVE-2008-0729 is listed by apple.Check if you run itEPSS 8.07%Feb 12, 2008
- High7.8Adobe Acrobat and Reader Buffer Overflow VulnerabilityPatch nowKEVEPSS 87.42%Feb 12, 2008
- Medium5.8Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow rem…Check if you run itEPSS 5.02%Feb 12, 2008
- Medium4.3Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which a…Check if you run itEPSS 5.37%Feb 12, 2008
- Medium5.0CVE-2007-5333 is listed by inventory_critical.Check this weekEPSS 62.58%Feb 12, 2008
- High8.8Adobe Acrobat and Reader Unspecified VulnerabilityPatch nowKEVEPSS 37.87%Feb 7, 2008
- Unknownourgame.com glworld Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.30%Feb 7, 2008
- Medium5.0The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an…Check this weekEPSS 19.62%Jan 23, 2008
- Medium4.3KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attrib…Check if you run itEPSS 3.26%Jan 16, 2008
- Medium6.8Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attac…Check if you run itEPSS 5.01%Jan 16, 2008
- Medium4.6Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode vi…Check if you run itEPSS 0.36%Jan 16, 2008
- High7.5Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the Proces…Check this weekEPSS 91.60%Jan 10, 2008
- Medium5.0mortbay_jetty jetty Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.86%Jan 8, 2008
- Medium4.3Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all doma…Check if you run itEPSS 0.65%Dec 28, 2007
- Medium6.4The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web…Check if you run itEPSS 5.16%Dec 27, 2007
- UnknownMicrosoft Internet Explorer 5.01 through 7 DHTML Object Memory Corruption VulnerabilityPatch nowKEVEPSS 28.03%Dec 20, 2007
Sort