Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "data…Check if you run itEPSS 1.45%Oct 11, 2002
- Medium5.0The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob…Check this weekEPSS 27.31%Oct 4, 2002
- Medium5.0Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of re…Check if you run itEPSS 7.85%Oct 4, 2002
- Medium6.8The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Wind…Check this weekEPSS 15.76%Oct 4, 2002
- Medium5.0The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.Check this weekEPSS 36.20%Aug 12, 2002
- High7.5Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2…Check this weekEPSS 89.82%Aug 12, 2002
- High7.5OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to…Check if you run itEPSS 8.17%Aug 12, 2002
- High7.5Microsoft data_engine Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 84.75%Aug 12, 2002
- High7.5Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.Check if you run itEPSS 3.80%Aug 12, 2002
- High7.5Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping,…Check this weekEPSS 13.60%Jul 23, 2002
- High7.5SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing…Check if you run itEPSS 4.27%Jul 11, 2002
- UnknownApache Chunk-encoded HTTP Request Arbitrary Code ExecutionPatch nowKEVEPSS 95.23%Jun 17, 2002
- Medium5.0Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a ..Check if you run itEPSS 3.45%Mar 22, 2002
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.92%Mar 13, 2002
- Low2.1Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtai…Check if you run itEPSS 0.34%Dec 31, 2001
- High7.5Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources.Check if you run itEPSS 4.93%Dec 31, 2001
- Medium5.1A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript…Check this weekEPSS 12.18%Dec 6, 2001
- Low3.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.Check if you run itEPSS 0.34%Dec 6, 2001
- High7.5Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, whic…Check if you run itEPSS 2.09%Dec 6, 2001
- Medium5.0Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.Check if you run itEPSS 7.80%Nov 22, 2001
- Critical9.8Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is n…Check if you run itEPSS 8.86%Oct 18, 2001
- High7.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus…Check if you run itEPSS 0.47%Oct 17, 2001
- Medium4.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.Check if you run itEPSS 0.61%Oct 2, 2001
- High7.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the conte…Check if you run itEPSS 3.08%Sep 11, 2001
- High7.2Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in…Check if you run itEPSS 1.62%Aug 14, 2001
Sort