Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allows local users to gain privileges via unspecified vectors.Check if you run itEPSS 0.69%Nov 26, 2010
- Medium5.8CVE-2010-3829 is listed by apple.Check if you run itEPSS 2.45%Nov 26, 2010
- Medium4.3iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad.Check if you run itEPSS 1.02%Nov 26, 2010
- Medium4.3Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote att…Check if you run itEPSS 1.24%Nov 26, 2010
- High7.6Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, mi…Check this weekEPSS 22.14%Nov 17, 2010
- Medium4.3libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during proces…Check if you run itEPSS 2.70%Nov 17, 2010
- Unknownnetshinesoftware com_netinvoice Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.84%Nov 16, 2010
- High7.8Microsoft Office Stack-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 89.39%Nov 9, 2010
- High7.8Microsoft PowerPoint Buffer Overflow VulnerabilityPatch nowKEVEPSS 58.65%Nov 9, 2010
- Low2.9The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-mi…Check if you run itEPSS 0.37%Nov 9, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remo…Check if you run itEPSS 5.10%Nov 7, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remo…Check if you run itEPSS 5.15%Nov 7, 2010
- UnknownArray index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigCheck if you run itEPSS 0.40%Nov 5, 2010
- High8.1Microsoft Internet Explorer Uninitialized Memory Corruption VulnerabilityPatch nowKEVEPSS 96.83%Nov 5, 2010
- UnknownJustSystems Ichitaro and Ichitaro Government Remote Code ExecutionPatch nowKEVEPSS 5.56%Nov 5, 2010
- UnknownJustSystems Ichitaro and Ichitaro Government Crafted Document Remote Code ExecutionPatch nowKEVEPSS 6.07%Nov 5, 2010
- UnknownAdobe Flash Player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 69.68%Oct 29, 2010
- Critical9.8Mozilla Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 83.16%Oct 27, 2010
- Medium4.9CVE-2010-4068 is listed by inventory_high.Check if you run itEPSS 0.88%Oct 25, 2010
- Medium5.0CVE-2010-3717 is listed by inventory_high.Check if you run itEPSS 1.43%Oct 25, 2010
- Medium6.0The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that crea…Check if you run itEPSS 0.97%Oct 25, 2010
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary…Check if you run itEPSS 1.06%Oct 25, 2010
- High7.1The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly…Check this weekEPSS 24.13%Oct 25, 2010
- UnknownAdobe shockwave_player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 74.63%Oct 21, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Servi…Check this weekEPSS 15.72%Oct 13, 2010
Sort