Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.Check if you run itEPSS 3.21%Sep 28, 2004
- Medium4.6The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a sym…Check if you run itEPSS 0.52%Sep 28, 2004
- UnknownWinamp .wsz Skin File VulnerabilityPatch nowKEVEPSS 2.54%Aug 25, 2004
- UnknownMicrosoft Internet Explorer Integer Overflow or WraparoundPatch nowKEVEPSS 38.48%Jul 30, 2004
- UnknownMicrosoft Internet Explorer showModalDialog Method VulnerabilityPatch nowKEVEPSS 61.06%Jul 30, 2004
- High7.5Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing an…Check if you run itEPSS 1.26%Jul 27, 2004
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.16%Jul 14, 2004
- UnknownMicrosoft Internet Explorer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 52.61%Jul 13, 2004
- Critical9.8k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leCheck if you run itEPSS 7.16%Jul 7, 2004
- Low2.1The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.Check if you run itEPSS 0.56%Jun 1, 2004
- UnknownMicrosoft netmeeting Out-of-bounds WritePatch nowKEVEPSS 85.60%May 13, 2004
- Low2.1mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.Check if you run itEPSS 0.63%May 4, 2004
- High7.5Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in…Check if you run itEPSS 5.45%Apr 15, 2004
- UnknownMicrosoft Outlook Express MHTML URL Processing VulnerabilityPatch nowKEVEPSS 63.25%Feb 13, 2004
- UnknownBuffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.Check if you run itEPSS 8.62%Feb 3, 2004
- UnknownMultiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.Check if you run itEPSS 2.79%Jan 20, 2004
- Medium6.0Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users t…Check if you run itEPSS 8.12%Jan 20, 2004
- Medium4.3MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.Check if you run itEPSS 2.67%Dec 31, 2003
- Medium4.0CVE-2003-1331 is listed by oracle.Check if you run itEPSS 3.28%Dec 31, 2003
- UnknownLinux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 3.92%Dec 19, 2003
- Medium5.0Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded nul…Check if you run itEPSS 1.51%Dec 15, 2003
- Medium5.0The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do n…Check this weekEPSS 34.82%Nov 17, 2003
- Medium6.8Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines…Check this weekEPSS 27.08%Oct 6, 2003
- Critical9.0Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary c…Check this weekEPSS 78.37%Sep 22, 2003
- UnknownWindows 2000 SP3 and SP4 PerformScmStage function VulnerabilityPatch nowKEVEPSS 58.81%Aug 1, 2003
Sort