Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary…Check this weekEPSS 58.96%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value…Check this weekEPSS 16.94%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cau…Check this weekEPSS 37.50%Aug 14, 2007
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web…Check if you run itEPSS 3.17%Aug 8, 2007
- Medium6.8Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of servi…Check if you run itEPSS 2.58%Aug 3, 2007
- Medium4.3WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support an…Check if you run itEPSS 2.44%Aug 3, 2007
- Medium6.8WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets…Check if you run itEPSS 1.43%Aug 3, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4…Check if you run itEPSS 9.48%Jul 25, 2007
- Critical9.3Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update…Check if you run itEPSS 6.53%Jul 23, 2007
- Medium4.6Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local users to have unknown impact v…Check if you run itEPSS 0.42%Jul 18, 2007
- High7.5Multiple unspecified vulnerabilities in the Customer Relationship Management Online Marketing component in Oracle PeopleSoft Enterprise 8.9 Bundle 26 and 9.0 Bundle 7…Check if you run itEPSS 2.74%Jul 18, 2007
- Medium6.5Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attacke…Check if you run itEPSS 2.10%Jul 18, 2007
- UnknownInteger overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to anCheck this weekEPSS 70.39%Jul 16, 2007
- High7.5Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact.Check if you run itEPSS 1.56%Jul 12, 2007
- Unknownlhaca file_archiver Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.70%Jul 6, 2007
- High8.5CVE-2007-3514 is listed by apple.Check if you run itEPSS 1.33%Jul 3, 2007
- High7.8Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other do…Check if you run itEPSS 1.50%Jun 28, 2007
- Critical9.3Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…Check if you run itEPSS 5.54%Jun 25, 2007
- Medium4.3CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers v…Check if you run itEPSS 7.06%Jun 25, 2007
- Medium4.3Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript se…Check if you run itEPSS 2.55%Jun 25, 2007
- Critical9.3WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary co…Check if you run itEPSS 7.29%Jun 25, 2007
- High7.1Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content…Check if you run itEPSS 2.56%Jun 21, 2007
- High7.8corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors rela…Check if you run itEPSS 3.08%Jun 19, 2007
- Medium4.3Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable,…Check if you run itEPSS 1.01%Jun 19, 2007
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36…Check if you run itEPSS 3.29%Jun 14, 2007
Sort