Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5SQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL co…Check if you run itEPSS 1.26%Apr 10, 2009
- High7.5SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL c…Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL comm…Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors.Check if you run itEPSS 1.36%Apr 10, 2009
- High7.5SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.05%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.03%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 1.26%Apr 10, 2009
- High7.5SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.Check if you run itEPSS 1.81%Apr 10, 2009
- Low2.6The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP clien…Check if you run itEPSS 7.26%Apr 9, 2009
- Medium4.0Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users…Check if you run itEPSS 1.15%Apr 7, 2009
- High7.8Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory…Check if you run itEPSS 1.87%Apr 7, 2009
- High8.8Microsoft Office PowerPoint Code Injection VulnerabilityPatch nowKEVEPSS 67.31%Apr 3, 2009
- Low2.6The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allow…Check if you run itEPSS 2.83%Mar 27, 2009
- Critical9.8phpMyAdmin Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.56%Mar 26, 2009
- UnknownJustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier Remote Code ExecutionPatch nowKEVEPSS 3.91%Mar 24, 2009
- High7.5SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter.Check if you run itEPSS 1.69%Mar 20, 2009
- UnknownApple quicktime Out-of-bounds WritePatch nowKEVEPSS 48.79%Mar 20, 2009
- Unknownwinzip winzip Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.69%Mar 20, 2009
- High8.8Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 96.63%Mar 19, 2009
- High7.5SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension fo…Check if you run itEPSS 1.05%Mar 13, 2009
- High7.5SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Mar 13, 2009
Sort