Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Active Template Library (ATL) COM Initialization VulnerabilityPatch nowKEVEPSS 37.76%Nov 4, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary…Check if you run itEPSS 1.96%Nov 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x b…Check if you run itEPSS 0.95%Nov 2, 2009
- Medium6.5SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x be…Check if you run itEPSS 1.61%Nov 2, 2009
- High8.5The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enab…Check if you run itEPSS 2.94%Nov 2, 2009
- Medium5.5The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place ar…Check if you run itEPSS 1.98%Nov 2, 2009
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before…Check if you run itEPSS 1.54%Nov 2, 2009
- Medium4.0The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determin…Check if you run itEPSS 1.13%Nov 2, 2009
- Medium6.9VMware Products Guest Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.75%Nov 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via…Check if you run itEPSS 2.00%Oct 28, 2009
- High7.5SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.01%Oct 28, 2009
- Critical10.0Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via…Check if you run itEPSS 2.46%Oct 28, 2009
- Critical10.0Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.Check if you run itEPSS 1.24%Oct 28, 2009
- Low3.6Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote aut…Check if you run itEPSS 1.65%Oct 22, 2009
- Low2.7Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to…Check if you run itEPSS 2.86%Oct 22, 2009
- Medium4.1Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to…Check if you run itEPSS 2.82%Oct 22, 2009
- Medium4.0Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remot…Check if you run itEPSS 1.96%Oct 22, 2009
- UnknownMicrosoft Internet Information Services (IIS) Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 90.91%Oct 19, 2009
- Critical9.3Microsoft GDI+ PNG Integer OverflowPatch nowKEVEPSS 23.46%Oct 14, 2009
- Critical9.3Microsoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 26.71%Oct 14, 2009
- Medium4.9Linux Kernel NULL Pointer DereferencePatch nowKEVEPSS 1.24%Oct 13, 2009
- High8.8Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 86.53%Oct 13, 2009
- High7.5iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-m…Check if you run itEPSS 0.93%Sep 21, 2009
- Medium4.3Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.Check if you run itEPSS 4.21%Sep 21, 2009
- High7.8The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (N…Check if you run itEPSS 2.47%Sep 10, 2009
Sort