Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the us…Check if you run itEPSS 1.65%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window p…Check if you run itEPSS 3.10%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive informati…Check if you run itEPSS 2.45%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does no…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credenti…Check if you run itEPSS 1.84%Sep 27, 2007
- High7.5Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via…Check if you run itEPSS 2.81%Sep 27, 2007
- Unknownxunlei web_thunder Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 3.88%Sep 20, 2007
- Critical9.8Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.39%Sep 18, 2007
- Medium5.0Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of service (crash) and possibly…Check if you run itEPSS 3.04%Sep 11, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 98.48%Sep 7, 2007
- Medium4.3Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbit…Check if you run itEPSS 2.14%Sep 5, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 72.98%Aug 25, 2007
- Medium6.8Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to exte…Check if you run itEPSS 1.34%Aug 20, 2007
- UnknownSkype Network Remote DoSPatch nowKEVEPSS 2.20%Aug 20, 2007
- UnknownLhaz 1.33 Arbitrary Code ExecutionPatch nowKEVEPSS 3.17%Aug 20, 2007
- Medium4.3Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop…Check if you run itEPSS 1.08%Aug 18, 2007
- UnknownJustsystem Ichitaro 2007 and earlier Remote Code ExecutionPatch nowKEVEPSS 3.08%Aug 17, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary…Check this weekEPSS 58.96%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value…Check this weekEPSS 16.94%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cau…Check this weekEPSS 37.50%Aug 14, 2007
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web…Check if you run itEPSS 3.17%Aug 8, 2007
- Medium6.8Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of servi…Check if you run itEPSS 2.58%Aug 3, 2007
- Medium4.3WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support an…Check if you run itEPSS 2.44%Aug 3, 2007
- Medium6.8WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets…Check if you run itEPSS 1.43%Aug 3, 2007
Sort