Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.Check if you run itEPSS 3.23%Mar 22, 1999
- Medium4.6Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is crea…Check if you run itEPSS 1.93%Mar 4, 1999
- Medium5.0A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.Check this weekEPSS 31.41%Jan 17, 1999
- Medium5.3The RPC portmapper service is running.Check if you run itEPSS 1.16%Jan 1, 1999
- Medium4.6mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.Check if you run itEPSS 0.85%Dec 27, 1998
- Critical10.0The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.Check this weekEPSS 18.21%Dec 1, 1998
- Medium4.6The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.Check if you run itEPSS 1.49%Nov 12, 1998
- Critical10.0Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, a…Check if you run itEPSS 7.58%Aug 7, 1998
- High7.2Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could…Check if you run itEPSS 1.70%Jun 29, 1998
- Medium5.0Information from SSL-encrypted sessions via PKCS #1.Check if you run itEPSS 8.46%Jun 26, 1998
- High7.5Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.Check this weekEPSS 11.53%Jan 1, 1998
- Medium5.0Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.Check this weekEPSS 19.94%Dec 30, 1997
- Critical10.0Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains acc…Check if you run itEPSS 3.68%Sep 19, 1997
- High7.5Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.Check if you run itEPSS 3.57%Sep 1, 1997
- Medium4.0ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.Check this weekEPSS 32.15%Aug 1, 1997
- Medium5.0Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.Check if you run itEPSS 2.10%Jul 23, 1997
- High7.5ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.Check this weekEPSS 25.79%Jan 1, 1997
- High7.5List of arbitrary files on Web host via nph-test-cgi script.Check this weekEPSS 25.97%Dec 10, 1996
- High7.2The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.Check if you run itEPSS 0.70%Jun 26, 1996
- Medium5.0test-cgi program allows an attacker to list files on the server.Check this weekEPSS 29.58%Apr 1, 1996
- Critical10.0phf CGI program allows remote command execution through shell metacharacters.Check this weekEPSS 86.87%Mar 20, 1996
- LowSNYK-UNMANAGED-MADLERZLIB-20840349Open the advisoryUnknown date
- LowSNYK-UNMANAGED-MADLERZLIB-20840330Open the advisoryUnknown date
- LowSNYK-UNMANAGED-MADLERZLIB-20840309Open the advisoryUnknown date
- MediumSNYK-UNMANAGED-MADLERZLIB-20840299Open the advisoryUnknown date
Sort