Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial…Check if you run itEPSS 2.47%Nov 4, 2002
- UnknownKerberos v4compatibility Administration Daemon (kadmind4) Remote Code ExecutionPatch nowKEVEPSS 15.10%Oct 22, 2002
- Medium5.0The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files v…Check this weekEPSS 18.65%Oct 11, 2002
- High7.8Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "data…Check if you run itEPSS 1.45%Oct 11, 2002
- Medium5.0The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob…Check this weekEPSS 27.31%Oct 4, 2002
- Medium5.0Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of re…Check if you run itEPSS 7.85%Oct 4, 2002
- Medium6.8The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Wind…Check this weekEPSS 15.76%Oct 4, 2002
- Medium5.0mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a…Check if you run itEPSS 7.04%Sep 25, 2002
- Medium5.0The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.Check this weekEPSS 36.20%Aug 12, 2002
- High7.5Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2…Check this weekEPSS 89.82%Aug 12, 2002
- High7.5OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to…Check if you run itEPSS 8.17%Aug 12, 2002
- High7.5Microsoft data_engine Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 84.75%Aug 12, 2002
- High7.5Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.Check if you run itEPSS 3.80%Aug 12, 2002
- High7.5Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping,…Check this weekEPSS 13.60%Jul 23, 2002
- High7.5SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing…Check if you run itEPSS 4.27%Jul 11, 2002
- High7.5Apache Chunk-encoded HTTP Request Arbitrary Code ExecutionPatch nowKEVEPSS 95.23%Jun 17, 2002
- Medium5.0Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a ..Check if you run itEPSS 3.45%Mar 22, 2002
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.92%Mar 13, 2002
- Low2.1Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtai…Check if you run itEPSS 0.34%Dec 31, 2001
- High7.5Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources.Check if you run itEPSS 4.93%Dec 31, 2001
- Low2.1mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which…Check if you run itEPSS 0.76%Dec 31, 2001
- Medium5.1A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript…Check this weekEPSS 12.18%Dec 6, 2001
- Low3.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.Check if you run itEPSS 0.34%Dec 6, 2001
- High7.5Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, whic…Check if you run itEPSS 2.09%Dec 6, 2001
- Medium5.0Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.Check if you run itEPSS 7.80%Nov 22, 2001
Sort