Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbi…Check if you run itEPSS 1.05%Dec 17, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.Check if you run itEPSS 1.09%Dec 17, 2008
- High7.5SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 17, 2008
- UnknownMicrosoft Internet Explorer CRecordInstance::TransferToDestination Remote Code ExecutionPatch nowKEVEPSS 66.51%Dec 11, 2008
- UnknownWordPad Word 97 Text Converter Stack Overflow VulnerabilityPatch nowKEVEPSS 43.03%Dec 10, 2008
- Low2.6Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new appl…Check if you run itEPSS 2.15%Nov 25, 2008
- Medium5.0Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, w…Check if you run itEPSS 2.16%Nov 25, 2008
- Critical9.3Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to e…Check if you run itEPSS 5.85%Nov 25, 2008
- Low1.9CVE-2008-4230 is listed by apple.Check if you run itEPSS 0.35%Nov 25, 2008
- Low3.7Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to re…Check if you run itEPSS 0.24%Nov 25, 2008
- Low3.6The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergen…Check if you run itEPSS 0.36%Nov 25, 2008
- High7.5Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously…Check if you run itEPSS 1.64%Nov 25, 2008
- High7.1ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and dev…Check if you run itEPSS 2.53%Nov 25, 2008
- Unknownphpcow phpcow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.69%Nov 25, 2008
- Medium4.3The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive infor…Check if you run itEPSS 8.60%Nov 17, 2008
- Low1.9Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive in…Check if you run itEPSS 0.32%Nov 17, 2008
- Critical9.3Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 all…Check if you run itEPSS 8.34%Nov 17, 2008
- Medium5.0Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors.Check if you run itEPSS 1.21%Nov 14, 2008
- High7.5SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via un…Check if you run itEPSS 1.00%Nov 14, 2008
- High7.8Adobe Reader and Acrobat Input Validation VulnerabilityPatch nowKEVEPSS 99.79%Nov 4, 2008
- UnknownMicrosoft Internet Information Services (IIS) Integer Overflow or WraparoundPatch nowKEVEPSS 46.27%Oct 29, 2008
- Critical9.8Microsoft Windows Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.75%Oct 23, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitra…Check if you run itEPSS 1.02%Oct 22, 2008
- High7.5SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Oct 22, 2008
- High7.5SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands…Check if you run itEPSS 1.05%Oct 22, 2008
Sort