Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 63.57%Oct 10, 2006
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 61.44%Sep 26, 2006
- High7.5codeworx_technologies dcp-portal Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.86%Sep 15, 2006
- Critical9.1OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attaCheck if you run itEPSS 3.95%Sep 5, 2006
- Unknownsendmail sendmail Use After FreePatch nowKEVEPSS 4.55%Aug 29, 2006
- Unknownjustsystem formliner Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.56%Aug 22, 2006
- Medium6.5MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which…Check this weekEPSS 13.57%Aug 18, 2006
- Low3.6MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database…Check if you run itEPSS 3.07%Aug 18, 2006
- Low2.1MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revo…Check if you run itEPSS 1.74%Aug 9, 2006
- UnknownMicrosoft visual_basic Out-of-bounds WritePatch nowKEVEPSS 10.17%Aug 8, 2006
- UnknownMicrosoft PowerPoint Mso.dll VulnerabilityPatch nowKEVEPSS 14.26%Aug 8, 2006
- High7.5WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted H…Check if you run itEPSS 5.30%Jul 31, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknow…Check if you run itEPSS 4.07%Jul 21, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact…Check if you run itEPSS 4.07%Jul 21, 2006
- Medium4.0Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (cr…Check this weekEPSS 31.06%Jul 21, 2006
- UnknownMicrosoft Excel Malformed file VulnerabilityPatch nowKEVEPSS 41.11%Jul 11, 2006
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 28.63%Jul 11, 2006
- UnknownMicrosoft Excel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.79%Jul 11, 2006
- Low2.1Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 befo…Check if you run itEPSS 0.65%Jul 10, 2006
- Medium5.0Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which…Check if you run itEPSS 9.20%Jul 6, 2006
- Medium5.4Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop.Check if you run itEPSS 1.14%Jun 26, 2006
- Medium4.0mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second…Check this weekEPSS 25.80%Jun 19, 2006
- Low2.6Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attacker…Check this weekEPSS 39.78%Jun 13, 2006
- High7.5SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multi…Check if you run itEPSS 3.54%Jun 1, 2006
- High8.8Microsoft Word Malformed Object Pointer VulnerabilityPatch nowKEVEPSS 48.11%May 19, 2006
Sort