Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which…Check if you run itEPSS 9.20%Jul 6, 2006
- Medium5.4Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop.Check if you run itEPSS 1.14%Jun 26, 2006
- Medium4.0mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second…Check this weekEPSS 25.80%Jun 19, 2006
- Low2.6Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attacker…Check this weekEPSS 39.78%Jun 13, 2006
- High7.5SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multi…Check if you run itEPSS 3.54%Jun 1, 2006
- High8.8Microsoft Word Malformed Object Pointer VulnerabilityPatch nowKEVEPSS 48.11%May 19, 2006
- High7.5Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.Check this weekEPSS 78.68%May 10, 2006
- Medium6.5Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP…Check this weekEPSS 38.37%May 5, 2006
- Medium5.0sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP reque…Check if you run itEPSS 5.06%May 5, 2006
- Medium5.0The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memor…Check this weekEPSS 36.35%May 5, 2006
- Medium5.0Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG…Check if you run itEPSS 8.13%Apr 27, 2006
- Medium5.0Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with…Check if you run itEPSS 4.16%Apr 25, 2006
- Medium5.0The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) vi…Check if you run itEPSS 1.89%Apr 21, 2006
- High7.5Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attr…Check if you run itEPSS 3.65%Apr 21, 2006
- High7.5Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an e…Check if you run itEPSS 3.77%Apr 21, 2006
- Medium5.1Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary co…Check this weekEPSS 13.91%Apr 21, 2006
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln# PSE01.Check if you run itEPSS 4.67%Apr 20, 2006
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 68.34%Apr 11, 2006
- Medium5.0Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JP…Check if you run itEPSS 4.36%Mar 31, 2006
- High7.5Apache Struts 1 ActionForm Denial-of-Service VulnerabilityPatch nowKEVEPSS 54.63%Mar 30, 2006
- UnknownMicrosoft Office Out-of-bounds WritePatch nowKEVEPSS 14.21%Mar 14, 2006
- Medium4.6MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_r…Check if you run itEPSS 1.37%Feb 27, 2006
- Low2.1MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query…Check if you run itEPSS 0.80%Jan 22, 2006
- High7.5Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute…Check this weekEPSS 45.58%Jan 10, 2006
- Medium5.0Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the m…Check if you run itEPSS 1.03%Dec 31, 2005
Sort