Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ...Check this weekEPSS 11.44%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are ex…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a…Check if you run itEPSS 2.34%Jan 11, 2011
- Medium4.0storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by mod…Check if you run itEPSS 9.47%Jan 11, 2011
- Medium5.0The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a strin…Check if you run itEPSS 3.40%Jan 10, 2011
- Medium4.0The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the quer…Check if you run itEPSS 2.48%Jan 10, 2011
- Medium4.7Linux Kernel NULL Pointer DereferencePatch nowKEVEPSS 0.74%Dec 30, 2010
- High7.5Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load…Check this weekEPSS 94.20%Dec 16, 2010
- Medium4.0Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a cra…Check this weekEPSS 18.36%Dec 16, 2010
- High7.8Exim Privilege Escalation VulnerabilityPatch nowKEVEPSS 17.96%Dec 10, 2010
- Critical9.8Exim Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.71%Dec 10, 2010
- High7.5Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to have an unspecified impact via a "dangerous file."Check if you run itEPSS 1.09%Dec 7, 2010
- Medium4.3CVE-2008-7270 is listed by inventory_critical.Check if you run itEPSS 3.43%Dec 6, 2010
- High7.5OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the nee…Check if you run itEPSS 8.30%Dec 6, 2010
- Medium4.3OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in t…Check if you run itEPSS 9.50%Dec 6, 2010
- High7.8Linux Kernel Improper Input Validation VulnerabilityPatch nowKEVEPSS 15.86%Dec 6, 2010
- High7.8Microsoft Windows Kernel Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 8.66%Dec 3, 2010
- Medium6.4The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a sessio…Check if you run itEPSS 2.14%Nov 26, 2010
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to…Check this weekEPSS 42.01%Nov 26, 2010
- Medium6.8Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute…Check if you run itEPSS 3.69%Nov 26, 2010
- Medium4.3Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe…Check if you run itEPSS 1.08%Nov 26, 2010
Sort