Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_…Check if you run itEPSS 5.25%Jan 9, 2001
- High7.5SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the…Check if you run itEPSS 1.93%Dec 31, 2000
- Medium5.0The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privi…Check if you run itEPSS 4.83%Dec 31, 2000
- Medium4.6Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.Check if you run itEPSS 1.36%Dec 19, 2000
- Medium4.6Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privi…Check if you run itEPSS 2.31%Dec 19, 2000
- Medium5.0Cisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%Dec 19, 2000
- High7.2MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.Check if you run itEPSS 1.93%Dec 19, 2000
- Medium5.0mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contai…Check this weekEPSS 35.64%Dec 19, 2000
- Critical10.0The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and…Check if you run itEPSS 4.74%Dec 19, 2000
- Medium5.0Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a c…Check this weekEPSS 14.79%Dec 11, 2000
- Medium5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.Check this weekEPSS 50.95%Nov 14, 2000
- Medium5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested UR…Check this weekEPSS 44.72%Nov 14, 2000
- Medium6.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.Check this weekEPSS 62.50%Oct 20, 2000
- Medium6.4Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that incl…Check this weekEPSS 25.66%Oct 20, 2000
- Medium5.0Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if t…Check this weekEPSS 10.43%Oct 13, 2000
- Medium5.0The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling t…Check this weekEPSS 10.03%Jul 20, 2000
- Medium4.6Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a…Check if you run itEPSS 1.38%Jul 11, 2000
- Medium4.6Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedur…Check if you run itEPSS 2.29%Jul 7, 2000
- Medium5.0Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.Check if you run itEPSS 3.28%Jul 5, 2000
- Medium5.0OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, wh…Check if you run itEPSS 1.44%Jun 12, 2000
- Medium5.0Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.Check this weekEPSS 14.63%Jun 5, 2000
- Critical10.0A system does not present an appropriate legal message or warning to a user who is accessing it.Check if you run itEPSS 6.02%Jun 1, 2000
- Medium5.0The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.Check this weekEPSS 46.65%May 31, 2000
- Low2.1Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability.Check if you run itEPSS 2.39%May 30, 2000
- Low2.1The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any u…Check this weekEPSS 90.61%May 30, 2000
Sort