Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 2.36%Apr 14, 2009
- UnknownWindows RPCSS Service Isolation VulnerabilityPatch nowKEVEPSS 4.06%Apr 14, 2009
- UnknownWindows WMI Service Isolation VulnerabilityPatch nowKEVEPSS 2.74%Apr 14, 2009
- UnknownMicrosoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 Privilege EscalationPatch nowKEVEPSS 36.83%Apr 14, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.03%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 1.03%Apr 10, 2009
- High7.5SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via un…Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5SQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL co…Check if you run itEPSS 1.26%Apr 10, 2009
- High7.5SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL c…Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL comm…Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors.Check if you run itEPSS 1.36%Apr 10, 2009
- High7.5SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.05%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.03%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 1.26%Apr 10, 2009
- High7.5SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.Check if you run itEPSS 1.81%Apr 10, 2009
- Low2.6The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP clien…Check if you run itEPSS 7.26%Apr 9, 2009
- Medium4.0Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users…Check if you run itEPSS 1.15%Apr 7, 2009
- Low2.6Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is…Check this weekEPSS 29.64%Apr 7, 2009
- High7.8Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory…Check if you run itEPSS 1.87%Apr 7, 2009
- High8.8Microsoft Office PowerPoint Code Injection VulnerabilityPatch nowKEVEPSS 67.31%Apr 3, 2009
- Medium6.8The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamic…Check if you run itEPSS 2.63%Mar 26, 2009
Sort