Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.Check if you run itEPSS 1.78%May 16, 2007
- Medium6.0The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER s…Check if you run itEPSS 1.88%May 16, 2007
- Medium4.0The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (cr…Check this weekEPSS 11.31%May 10, 2007
- Low2.6The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including th…Check this weekEPSS 18.25%May 10, 2007
- Low2.6Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arb…Check this weekEPSS 19.89%May 10, 2007
- Medium4.3CVE-2006-7196 is listed by inventory_critical.Check this weekEPSS 72.17%May 10, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbit…Check if you run itEPSS 5.48%May 10, 2007
- Low1.9Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaS…Check if you run itEPSS 0.74%May 9, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 77.66%May 8, 2007
- UnknownWord Document Stream VulnerabilityPatch nowKEVEPSS 21.13%May 8, 2007
- Unknownwildbits mygallery Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 62.87%Apr 29, 2007
- High7.8The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows r…Check if you run itEPSS 8.32%Apr 25, 2007
- UnknownOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KECheck if you run itEPSS 2.40%Apr 25, 2007
- High7.6Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via par…Check this weekEPSS 83.80%Apr 24, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
- Critical10.0Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.Check if you run itEPSS 3.02%Apr 18, 2007
- Unknownsuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- Unknownphpwiki phpwiki Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.28%Apr 12, 2007
- Medium5.0The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows…Check if you run itEPSS 2.55%Apr 10, 2007
- Critical10.0Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspe…Check if you run itEPSS 6.66%Apr 10, 2007
- Critical10.0Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 6.66%Apr 10, 2007
- High7.5Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 4.37%Apr 10, 2007
- Medium5.0CVE-2007-1913 is listed by apple.Check if you run itEPSS 2.22%Apr 10, 2007
Sort