Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0CVE-2003-1331 is listed by oracle.Check if you run itEPSS 3.28%Dec 31, 2003
- UnknownLinux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 3.92%Dec 19, 2003
- Medium5.0Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded nul…Check if you run itEPSS 1.51%Dec 15, 2003
- Medium5.0The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do n…Check this weekEPSS 34.82%Nov 17, 2003
- Medium6.8Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines…Check this weekEPSS 27.08%Oct 6, 2003
- Critical9.0Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary c…Check this weekEPSS 78.37%Sep 22, 2003
- UnknownWindows 2000 SP3 and SP4 PerformScmStage function VulnerabilityPatch nowKEVEPSS 58.81%Aug 1, 2003
- High7.5Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certifica…Check if you run itEPSS 2.06%Jun 16, 2003
- Medium5.0Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.Check if you run itEPSS 0.77%Jun 9, 2003
- Critical9.0MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a con…Check this weekEPSS 44.83%Mar 24, 2003
- High7.5Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.Check if you run itEPSS 1.83%Mar 3, 2003
- Medium5.0Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.Check if you run itEPSS 2.99%Feb 19, 2003
- Medium5.0Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request fo…Check if you run itEPSS 2.49%Feb 7, 2003
- Medium6.8Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to i…Check if you run itEPSS 9.13%Feb 7, 2003
- Medium5.0Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read…Check if you run itEPSS 4.51%Feb 7, 2003
- Medium5.0Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain…Check this weekEPSS 46.03%Feb 7, 2003
- High7.5Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass ce…Check if you run itEPSS 5.85%Jan 17, 2003
- Medium5.0The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Ma…Check if you run itEPSS 1.27%Dec 31, 2002
- High7.8Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications)…Check if you run itEPSS 9.68%Dec 31, 2002
- Medium5.0Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks t…Check if you run itEPSS 7.31%Dec 31, 2002
- Medium5.0Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks t…Check if you run itEPSS 7.11%Dec 31, 2002
- Medium5.0The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path,…Check this weekEPSS 41.40%Dec 31, 2002
- Medium5.0The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system info…Check this weekEPSS 30.67%Dec 31, 2002
- High7.5The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activ…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.5The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers…Check if you run itEPSS 2.53%Dec 31, 2002
Sort