Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x…Check this weekEPSS 64.90%Jan 25, 2008
- Medium5.0The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an…Check this weekEPSS 19.62%Jan 23, 2008
- Medium4.3KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attrib…Check if you run itEPSS 3.26%Jan 16, 2008
- Medium6.8Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attac…Check if you run itEPSS 5.01%Jan 16, 2008
- Medium4.6Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode vi…Check if you run itEPSS 0.36%Jan 16, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 3.95%Jan 12, 2008
- Medium4.3mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduc…Check this weekEPSS 14.73%Jan 12, 2008
- High7.8Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corru…Check if you run itEPSS 3.90%Jan 12, 2008
- Medium4.3Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges v…Check if you run itEPSS 9.11%Jan 12, 2008
- High7.5Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the Proces…Check this weekEPSS 91.60%Jan 10, 2008
- Low3.5Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbi…Check if you run itEPSS 8.32%Jan 8, 2008
- Medium4.0The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authe…Check if you run itEPSS 9.95%Jan 8, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-…Check this weekEPSS 75.89%Jan 8, 2008
- Medium5.0mortbay_jetty jetty Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.97%Jan 8, 2008
- High7.5The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to…Check if you run itEPSS 1.36%Jan 3, 2008
- Medium5.0JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID.Check if you run itEPSS 1.19%Jan 3, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary web script or HTML, which…Check if you run itEPSS 1.22%Jan 3, 2008
- Medium4.3Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all doma…Check if you run itEPSS 0.65%Dec 28, 2007
- High7.5SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter.Check if you run itEPSS 3.84%Dec 27, 2007
- Medium6.4The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web…Check if you run itEPSS 5.16%Dec 27, 2007
- Medium4.3Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as so…Check this weekEPSS 38.04%Dec 21, 2007
- UnknownMicrosoft Internet Explorer 5.01 through 7 DHTML Object Memory Corruption VulnerabilityPatch nowKEVEPSS 28.03%Dec 20, 2007
- Critical9.3Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary c…Check if you run itEPSS 5.59%Dec 19, 2007
- Medium4.3WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of…Check if you run itEPSS 3.10%Dec 19, 2007
- Unknownjustsystem ichitaro Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.09%Dec 18, 2007
Sort