Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded nul…Check if you run itEPSS 1.51%Dec 15, 2003
- High7.5The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to t…Check this weekEPSS 77.61%Nov 17, 2003
- Medium4.3Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote…Check this weekEPSS 19.87%Nov 17, 2003
- Critical9.0Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary c…Check this weekEPSS 78.37%Sep 22, 2003
- High7.2Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.Check if you run itEPSS 4.13%Aug 27, 2003
- Medium5.0Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.Check this weekEPSS 36.18%Aug 27, 2003
- High7.2Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe H…Check if you run itEPSS 2.26%Aug 27, 2003
- UnknownWindows 2000 SP3 and SP4 PerformScmStage function VulnerabilityPatch nowKEVEPSS 58.81%Aug 1, 2003
- High7.5Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certifica…Check if you run itEPSS 2.06%Jun 16, 2003
- Medium5.0Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.Check if you run itEPSS 0.77%Jun 9, 2003
- Critical9.0MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a con…Check this weekEPSS 44.83%Mar 24, 2003
- High7.5Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.Check if you run itEPSS 1.83%Mar 3, 2003
- Medium5.0Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.Check if you run itEPSS 2.99%Feb 19, 2003
- Medium5.0The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Ma…Check if you run itEPSS 1.27%Dec 31, 2002
- Medium5.0Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures,…Check if you run itEPSS 4.58%Dec 31, 2002
- High7.5The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activ…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.5The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers…Check if you run itEPSS 2.53%Dec 31, 2002
- High7.2Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.Check if you run itEPSS 3.17%Dec 31, 2002
- Low2.1Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses tha…Check if you run itEPSS 4.70%Dec 31, 2002
- Medium5.0Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via…Check this weekEPSS 13.58%Dec 31, 2002
- High7.5Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.Check if you run itEPSS 6.98%Dec 31, 2002
- High7.5The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthoriz…Check this weekEPSS 16.12%Dec 31, 2002
- Medium5.0CVE-2002-1790 is listed by inventory_critical.Check this weekEPSS 33.97%Dec 31, 2002
- UnknownMicrosoft Internet Information Services (IIS) Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 16.05%Dec 31, 2002
- Critical10.0Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interfac…Check if you run itEPSS 9.06%Dec 26, 2002
Sort