Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of service (crash) and possibly…Check if you run itEPSS 3.04%Sep 11, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 98.48%Sep 7, 2007
- Medium4.3Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbit…Check if you run itEPSS 2.14%Sep 5, 2007
- High7.5Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via di…Check if you run itEPSS 5.88%Sep 5, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 72.98%Aug 25, 2007
- Medium5.0The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service…Check this weekEPSS 12.90%Aug 23, 2007
- Medium6.8Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to exte…Check if you run itEPSS 1.34%Aug 20, 2007
- UnknownSkype Network Remote DoSPatch nowKEVEPSS 2.20%Aug 20, 2007
- UnknownLhaz 1.33 Arbitrary Code ExecutionPatch nowKEVEPSS 3.17%Aug 20, 2007
- Medium4.3Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop…Check if you run itEPSS 1.08%Aug 18, 2007
- UnknownJustsystem Ichitaro 2007 and earlier Remote Code ExecutionPatch nowKEVEPSS 3.08%Aug 17, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary…Check this weekEPSS 58.96%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value…Check this weekEPSS 16.94%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cau…Check this weekEPSS 37.50%Aug 14, 2007
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web…Check if you run itEPSS 3.17%Aug 8, 2007
- Low1.2The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users…Check if you run itEPSS 0.40%Aug 8, 2007
- Medium6.8Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of servi…Check if you run itEPSS 2.58%Aug 3, 2007
- Medium4.3WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support an…Check if you run itEPSS 2.44%Aug 3, 2007
- Medium6.8WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets…Check if you run itEPSS 1.43%Aug 3, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4…Check if you run itEPSS 9.48%Jul 25, 2007
- Critical9.3Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update…Check if you run itEPSS 6.53%Jul 23, 2007
- Medium4.6Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local users to have unknown impact v…Check if you run itEPSS 0.42%Jul 18, 2007
- High7.5Multiple unspecified vulnerabilities in the Customer Relationship Management Online Marketing component in Oracle PeopleSoft Enterprise 8.9 Bundle 26 and 9.0 Bundle 7…Check if you run itEPSS 2.74%Jul 18, 2007
- Medium6.5Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attacke…Check if you run itEPSS 2.10%Jul 18, 2007
- UnknownInteger overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to anCheck this weekEPSS 70.39%Jul 16, 2007
Sort