Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the da…Check if you run itEPSS 3.09%Sep 4, 2012
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 all…Check if you run itEPSS 1.61%Sep 4, 2012
- Medium5.0The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possib…Check if you run itEPSS 2.37%Sep 4, 2012
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 61.66%Sep 1, 2012
- UnknownSimple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! Remote Code ExecutionPatch nowKEVEPSS 4.84%Aug 31, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attacker…Check if you run itEPSS 1.39%Aug 27, 2012
- Critical9.8Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 98.54%Aug 27, 2012
- Medium4.3The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before…Check if you run itEPSS 9.60%Aug 22, 2012
- Low2.6Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.…Check this weekEPSS 23.09%Aug 22, 2012
- Critical10.0CVE-2012-2750 is listed by Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533..Check if you run itEPSS 3.64%Aug 17, 2012
- High7.8Adobe Flash Player Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 70.38%Aug 15, 2012
- High8.8Microsoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityPatch nowKEVEPSS 72.03%Aug 14, 2012
- Medium5.0The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to deter…Check if you run itEPSS 1.77%Jul 31, 2012
- Medium5.0The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which al…Check if you run itEPSS 2.71%Jul 31, 2012
- Medium4.3The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the sc…Check if you run itEPSS 2.06%Jul 31, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the print_object function in lib/datalib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3, when a developer debuggin…Check if you run itEPSS 1.83%Jul 20, 2012
- Medium4.0The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during…Check if you run itEPSS 1.17%Jul 20, 2012
- Medium5.5backup/moodle2/restore_stepslib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not check for the moodle/course:changeidnumber privilege during handling o…Check if you run itEPSS 1.27%Jul 20, 2012
- Medium5.0The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address…Check if you run itEPSS 2.15%Jul 20, 2012
- Medium6.8lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which…Check if you run itEPSS 2.07%Jul 20, 2012
- Medium5.0CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote atta…Check if you run itEPSS 2.10%Jul 20, 2012
- Medium5.0login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote a…Check if you run itEPSS 2.12%Jul 20, 2012
- Medium4.0The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote authenticated users to impersonate other…Check if you run itEPSS 1.73%Jul 20, 2012
- Medium6.5Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, whic…Check if you run itEPSS 1.27%Jul 20, 2012
- Medium4.9Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduc…Check if you run itEPSS 1.19%Jul 20, 2012
Sort