Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.…Check this weekEPSS 77.38%Jun 14, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that incl…Check if you run itEPSS 1.29%Jun 14, 2007
- High7.5CVE-2007-3187 is listed by apple.Check if you run itEPSS 3.22%Jun 12, 2007
- Critical9.3Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated us…Check if you run itEPSS 4.93%Jun 12, 2007
- High7.8Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that trigger memory co…Check if you run itEPSS 1.88%Jun 12, 2007
- Critical10.0Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js sc…Check if you run itEPSS 3.49%May 24, 2007
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 t…Check this weekEPSS 58.25%May 21, 2007
- Low3.5MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.Check if you run itEPSS 1.78%May 16, 2007
- Medium6.0The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER s…Check if you run itEPSS 1.88%May 16, 2007
- Medium4.0The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (cr…Check this weekEPSS 11.31%May 10, 2007
- Low2.6The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including th…Check this weekEPSS 18.25%May 10, 2007
- Low2.6Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arb…Check this weekEPSS 19.89%May 10, 2007
- Medium4.3CVE-2006-7196 is listed by inventory_critical.Check this weekEPSS 72.17%May 10, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbit…Check if you run itEPSS 5.48%May 10, 2007
- Low1.9Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaS…Check if you run itEPSS 0.74%May 9, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 77.80%May 8, 2007
- UnknownWord Document Stream VulnerabilityPatch nowKEVEPSS 21.64%May 8, 2007
- Unknownwildbits mygallery Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 62.87%Apr 29, 2007
- High7.8The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows r…Check if you run itEPSS 8.32%Apr 25, 2007
- UnknownOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KECheck if you run itEPSS 2.40%Apr 25, 2007
- High7.6Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via par…Check this weekEPSS 83.80%Apr 24, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
- Critical10.0Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.Check if you run itEPSS 3.02%Apr 18, 2007
Sort