Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apache Struts 1 ActionForm Denial-of-Service VulnerabilityPatch nowKEVEPSS 54.63%Mar 30, 2006
- UnknownMicrosoft Office Out-of-bounds WritePatch nowKEVEPSS 14.21%Mar 14, 2006
- Medium4.6MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_r…Check if you run itEPSS 1.37%Feb 27, 2006
- Low2.1MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query…Check if you run itEPSS 0.80%Jan 22, 2006
- Medium5.0TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to in…Check if you run itEPSS 2.37%Jan 21, 2006
- High7.5Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute…Check this weekEPSS 45.58%Jan 10, 2006
- High7.5Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3…Check this weekEPSS 13.06%Jan 9, 2006
- High7.5The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpe…Check this weekEPSS 13.24%Jan 9, 2006
- High7.5TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints v…Check if you run itEPSS 1.38%Dec 31, 2005
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web…Check if you run itEPSS 7.85%Dec 31, 2005
- High7.8The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to rea…Check if you run itEPSS 3.47%Dec 31, 2005
- Medium5.0Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such…Check this weekEPSS 25.67%Dec 31, 2005
- Medium5.0Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the m…Check if you run itEPSS 1.03%Dec 31, 2005
- Medium5.4mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial…Check this weekEPSS 24.29%Dec 31, 2005
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 86.09%Dec 28, 2005
- UnknownIceWarp Web Mail HTTP_USER_AGENT VulnerabilityPatch nowKEVEPSS 8.60%Dec 27, 2005
- UnknownIceWarp Web Mail Language Parameter PHP Code VulnerabilityPatch nowKEVEPSS 8.49%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.48%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.57%Dec 27, 2005
- High7.8The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to caus…Check this weekEPSS 11.91%Dec 22, 2005
- Medium6.3SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs pCheck if you run itEPSS 1.39%Dec 19, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to i…Check this weekEPSS 73.69%Dec 13, 2005
- UnknownMicrosoft Internet Explorer Javascript BODY onload VulnerabilityPatch nowKEVEPSS 83.47%Dec 13, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web scri…Check if you run itEPSS 1.21%Dec 3, 2005
- High7.8Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function.Check if you run itEPSS 1.31%Nov 29, 2005
Sort