Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary S…Check if you run itEPSS 1.06%Feb 16, 2009
- Medium4.3CVE-2008-6144 is listed by inventory_high.Check if you run itEPSS 1.03%Feb 16, 2009
- Medium5.0Microsoft Exchange Server Improper Input ValidationPatch nowKEVEPSS 26.24%Feb 10, 2009
- Medium4.3Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http UR…Check if you run itEPSS 2.36%Jan 28, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.06%Jan 28, 2009
- Critical10.0The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execu…Check if you run itEPSS 3.31%Jan 22, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitra…Check if you run itEPSS 1.56%Jan 22, 2009
- High7.5Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hija…Check if you run itEPSS 1.79%Jan 22, 2009
- High7.5The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random s…Check if you run itEPSS 9.44%Jan 22, 2009
- UnknownOpenOffice.org 1.1.2 through 1.1.5 Memory CorruptionPatch nowKEVEPSS 7.50%Jan 21, 2009
- Low2.1An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current login to a web site, which…Check if you run itEPSS 0.87%Jan 20, 2009
- High7.1Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the a…Check if you run itEPSS 1.67%Jan 15, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authe…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium5.5Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated u…Check if you run itEPSS 1.02%Jan 14, 2009
- Medium4.0Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to…Check if you run itEPSS 1.53%Jan 14, 2009
- Medium6.5Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authentic…Check if you run itEPSS 1.75%Jan 14, 2009
- Critical9.3CVE-2009-0070 is listed by apple.Check if you run itEPSS 2.86%Jan 8, 2009
- Medium5.0Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and bro…Check if you run itEPSS 3.92%Jan 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.02%Dec 31, 2008
- High7.5SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 31, 2008
- High7.5SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 31, 2008
- High7.5SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comm…Check if you run itEPSS 1.06%Dec 31, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitr…Check if you run itEPSS 1.03%Dec 31, 2008
Sort