Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Linux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 3.75%Sep 8, 2010
- Medium4.3WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read acces…Check if you run itEPSS 1.60%Sep 7, 2010
- Critical9.3Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allow…Check if you run itEPSS 3.31%Sep 7, 2010
- High7.5Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 5.67%Aug 30, 2010
- Critical10.0Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before…Check if you run itEPSS 3.69%Aug 24, 2010
- Medium6.8Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruptio…Check if you run itEPSS 4.50%Aug 19, 2010
- Medium6.8FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possi…Check if you run itEPSS 4.20%Aug 19, 2010
- Medium6.8Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash…Check if you run itEPSS 5.84%Aug 19, 2010
- Medium6.8The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to caus…Check if you run itEPSS 5.11%Aug 19, 2010
- Unknowne107 bbcode/php.bb Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 4.87%Aug 19, 2010
- Medium4.3Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, whe…Check if you run itEPSS 9.98%Aug 17, 2010
- Medium5.0CVE-2010-1870 is listed by inventory_high.Check this weekEPSS 92.02%Aug 17, 2010
- UnknownLinux Kernel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.79%Aug 12, 2010
- Critical9.8Adobe ColdFusion Directory Traversal VulnerabilityPatch nowKEVEPSS 99.75%Aug 11, 2010
- Medium6.9Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors i…Check if you run itEPSS 0.78%Aug 5, 2010
- Medium5.0CVE-2010-2791 is listed by inventory_critical.Check if you run itEPSS 8.28%Aug 5, 2010
- Medium4.3CVE-2009-2696 is listed by inventory_critical.Check if you run itEPSS 5.01%Aug 5, 2010
- Critical9.3Apple iphone_os Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 33.93%Aug 5, 2010
- UnknownThe WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and…Check this weekEPSS 57.54%Aug 4, 2010
- High8.8Red Hat Linux JBoss Seam 2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 83.40%Aug 4, 2010
- Low2.1The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving (1) the…Check if you run itEPSS 0.35%Jul 30, 2010
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to injec…Check if you run itEPSS 1.29%Jul 28, 2010
- Medium5.0The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a reque…Check this weekEPSS 21.43%Jul 28, 2010
- High7.5SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Jul 28, 2010
- High7.5SQL injection vulnerability in the t3m_affiliate extension 0.5.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Jul 28, 2010
Sort