Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target tabl…Check this weekEPSS 22.35%Nov 3, 2004
- Critical10.0The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Se…Check this weekEPSS 67.82%Nov 3, 2004
- Medium5.0Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.Check if you run itEPSS 4.43%Nov 1, 2004
- UnknownDouble free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.Check if you run itEPSS 6.99%Oct 20, 2004
- UnknownBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.Check if you run itEPSS 1.61%Oct 20, 2004
- High7.5mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.Check if you run itEPSS 3.21%Sep 28, 2004
- Medium4.6The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a sym…Check if you run itEPSS 0.52%Sep 28, 2004
- UnknownWinamp .wsz Skin File VulnerabilityPatch nowKEVEPSS 2.54%Aug 25, 2004
- UnknownMicrosoft Internet Explorer Integer Overflow or WraparoundPatch nowKEVEPSS 38.48%Jul 30, 2004
- UnknownMicrosoft Internet Explorer showModalDialog Method VulnerabilityPatch nowKEVEPSS 61.06%Jul 30, 2004
- High7.5Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing an…Check if you run itEPSS 1.26%Jul 27, 2004
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 7.21%Jul 14, 2004
- UnknownMicrosoft Internet Explorer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 52.61%Jul 13, 2004
- Critical9.8k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leCheck if you run itEPSS 7.16%Jul 7, 2004
- Low2.1The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.Check if you run itEPSS 0.56%Jun 1, 2004
- UnknownMicrosoft netmeeting Out-of-bounds WritePatch nowKEVEPSS 85.48%May 13, 2004
- Low2.1mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.Check if you run itEPSS 0.63%May 4, 2004
- High7.5Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in…Check if you run itEPSS 5.45%Apr 15, 2004
- UnknownMicrosoft Outlook Express MHTML URL Processing VulnerabilityPatch nowKEVEPSS 63.25%Feb 13, 2004
- UnknownBuffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.Check if you run itEPSS 8.62%Feb 3, 2004
- UnknownMultiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.Check if you run itEPSS 2.79%Jan 20, 2004
- Medium6.0Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users t…Check if you run itEPSS 8.16%Jan 20, 2004
- Medium4.3MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.Check if you run itEPSS 2.67%Dec 31, 2003
- Medium4.0CVE-2003-1331 is listed by oracle.Check if you run itEPSS 3.28%Dec 31, 2003
- UnknownLinux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 3.92%Dec 19, 2003
Sort