Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticate…Check if you run itEPSS 2.23%Jun 28, 2010
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web scr…Check if you run itEPSS 2.48%Jun 28, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrar…Check if you run itEPSS 2.48%Jun 28, 2010
- Low1.9Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended passcode requirements, and…Check if you run itEPSS 0.26%Jun 22, 2010
- Medium6.4WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows rem…Check if you run itEPSS 3.64%Jun 22, 2010
- Medium5.8The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier fo…Check if you run itEPSS 1.84%Jun 22, 2010
- Medium4.3Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier for remote web servers to tr…Check if you run itEPSS 1.54%Jun 22, 2010
- Medium6.9Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations thr…Check if you run itEPSS 0.36%Jun 22, 2010
- Medium6.8ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applic…Check if you run itEPSS 2.89%Jun 22, 2010
- Medium6.8Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of serv…Check if you run itEPSS 3.61%Jun 22, 2010
- Medium5.0Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which might allow remote attackers to obtain location inf…Check if you run itEPSS 2.17%Jun 22, 2010
- Medium4.3WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements,…Check if you run itEPSS 2.60%Jun 22, 2010
- Medium5.0Impact Financials, Inc.Check if you run itEPSS 6.00%Jun 18, 2010
- Medium5.0mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configuration…Check this weekEPSS 16.00%Jun 18, 2010
- Critical9.3CVE-2010-1387 is listed by apple.Check if you run itEPSS 6.10%Jun 18, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007…Check this weekEPSS 22.16%Jun 8, 2010
- Medium6.0Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.Check this weekEPSS 21.79%Jun 8, 2010
- Medium5.0The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwi…Check if you run itEPSS 3.72%Jun 8, 2010
- Medium6.5Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field def…Check if you run itEPSS 3.12%Jun 8, 2010
- High7.8Adobe Flash Player Memory Corruption VulnerabilityPatch nowKEVEPSS 82.53%Jun 8, 2010
- Medium6.4RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitializ…Check if you run itEPSS 2.39%Jun 3, 2010
- High7.5The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that…Check if you run itEPSS 7.83%Jun 3, 2010
- UnknownOracle Java SE and Java for Business JDK Java Deployment Toolkit Component VulnerabilityPatch nowKEVEPSS 69.95%Jun 3, 2010
- High7.5SQL injection vulnerability in the Calendar Base (cal) extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data.Check if you run itEPSS 1.74%Jun 2, 2010
- Medium4.3Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note a…Check this weekEPSS 17.94%May 27, 2010
Sort