Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMozilla Foundation Security Advisories — MozillaCheck if you run itEPSS 3.28%Apr 5, 2010
- Medium6.5Adobe BlazeDS Information Disclosure VulnerabilityPatch nowKEVEPSS 90.12%Feb 15, 2010
- Medium5.0FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemon crash) via a HEAD request…Check if you run itEPSS 6.26%Feb 3, 2010
- UnknownApache HTTP Server Improper Certificate ValidationPatch nowKEVEPSS 87.26%Nov 18, 2009
- Medium6.8The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom…Check if you run itEPSS 1.55%Nov 13, 2009
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 51.32%Aug 13, 2009
- High8.5Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated us…Check this weekEPSS 10.59%Jul 13, 2009
- High8.8Microsoft Windows Video ActiveX Control Remote Code Execution VulnerabilityPatch nowKEVEPSS 76.58%Jul 7, 2009
- High7.8The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (devic…Check if you run itEPSS 2.80%Jun 19, 2009
- UnknownMicrosoft Internet Information Services (IIS) Integer Overflow or WraparoundPatch nowKEVEPSS 46.27%Oct 29, 2008
- Critical9.8Microsoft Windows Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.75%Oct 23, 2008
- High8.1Cisco IOS Cross-Site Request Forgery VulnerabilityPatch nowKEVEPSS 33.87%Sep 18, 2008
- Medium6.8Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the us…Check if you run itEPSS 1.65%Sep 27, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 72.98%Aug 25, 2007
- Medium4.3CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers v…Check if you run itEPSS 7.06%Jun 25, 2007
- UnknownMicrosoft XML Core Services VulnerabilityPatch nowKEVEPSS 77.59%Nov 14, 2006
- Medium5.0sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP reque…Check if you run itEPSS 5.06%May 5, 2006
- High7.5Apache Struts 1 ActionForm Denial-of-Service VulnerabilityPatch nowKEVEPSS 54.63%Mar 30, 2006
- UnknownIceWarp Web Mail HTTP_USER_AGENT VulnerabilityPatch nowKEVEPSS 8.60%Dec 27, 2005
- High8.5MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibl…Check if you run itEPSS 4.73%Aug 16, 2005
- UnknownVeritas Backup Exec Agent Out-of-bounds WritePatch nowKEVEPSS 86.37%Jun 24, 2005
- Medium5.3Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, whichCheck if you run itEPSS 1.91%May 20, 2005
- Medium5.0AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XM…Check if you run itEPSS 1.82%May 2, 2005
- Medium5.0phpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%May 2, 2005
- UnknownMicrosoft asp.net Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.70%Feb 8, 2005
Sort