Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec…Check if you run itEPSS 1.05%Jul 28, 2010
- High7.5SQL injection vulnerability in the Event Registration (event_registr) extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands v…Check if you run itEPSS 1.05%Jul 28, 2010
- High7.5SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Jul 28, 2010
- High7.5SQL injection vulnerability in the AST ZipCodeSearch (ast_addresszipsearch) extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via uns…Check if you run itEPSS 1.05%Jul 28, 2010
- High7.5SQL injection vulnerability in the AIRware Lexicon (air_lexicon) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Jul 28, 2010
- Low3.5Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via…Check if you run itEPSS 0.83%Jul 28, 2010
- High7.5SQL injection vulnerability in the T3M E-Mail Marketing Tool (t3m) extension 0.2.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via…Check if you run itEPSS 1.05%Jul 28, 2010
- Critical9.8The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to…Check this weekEPSS 28.47%Jul 28, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 0.84%Jul 22, 2010
- High7.5SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.00%Jul 22, 2010
- High7.5SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 allows remote attackers to execute arbitrary SQL c…Check if you run itEPSS 1.00%Jul 22, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrary web sc…Check if you run itEPSS 0.85%Jul 22, 2010
- Critical10.0Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows remote attackers to have an unspecified impact vi…Check if you run itEPSS 2.74%Jul 22, 2010
- Medium5.0Unspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive inf…Check if you run itEPSS 1.08%Jul 22, 2010
- High7.5SQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output) extension before 0.1.12 for TYPO3 allows remote attackers to execute arbit…Check if you run itEPSS 1.00%Jul 22, 2010
- High7.5SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Jul 22, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspe…Check if you run itEPSS 1.02%Jul 22, 2010
- High7.8Microsoft Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 89.62%Jul 21, 2010
- Medium6.4Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6,…Check if you run itEPSS 6.51%Jul 13, 2010
- Low3.5MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABAS…Check if you run itEPSS 9.01%Jul 13, 2010
- Medium6.4Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to…Check this weekEPSS 54.78%Jul 13, 2010
- Critical9.3Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web site, which allows user-as…Check if you run itEPSS 3.90%Jul 8, 2010
- Medium6.5Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application cra…Check if you run itEPSS 2.63%Jun 30, 2010
- Critical9.8Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary co…Check this weekEPSS 43.38%Jun 30, 2010
- Medium6.8Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers…Check if you run itEPSS 0.98%Jun 28, 2010
Sort