Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers…Check if you run itEPSS 2.57%Sep 27, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to…Check if you run itEPSS 1.92%Sep 27, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows re…Check if you run itEPSS 3.10%Sep 27, 2007
- Medium6.8Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the us…Check if you run itEPSS 1.65%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window p…Check if you run itEPSS 3.10%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive informati…Check if you run itEPSS 2.45%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does no…Check if you run itEPSS 2.00%Sep 27, 2007
- Medium4.3Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credenti…Check if you run itEPSS 1.84%Sep 27, 2007
- High7.5Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via…Check if you run itEPSS 2.81%Sep 27, 2007
- Medium6.8CVE-2007-5135 is listed by inventory_critical.Check this weekEPSS 16.06%Sep 27, 2007
- High7.5Unspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors.Check if you run itEPSS 1.93%Sep 26, 2007
- Unknownxunlei web_thunder Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 3.88%Sep 20, 2007
- Critical9.8Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityPatch nowKEVEPSS 97.39%Sep 18, 2007
- Medium6.1Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows…Check this weekEPSS 26.19%Sep 14, 2007
- High7.5Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager…Check this weekEPSS 45.71%Sep 11, 2007
- Medium5.0Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of service (crash) and possibly…Check if you run itEPSS 3.04%Sep 11, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 98.48%Sep 7, 2007
- Medium4.3Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbit…Check if you run itEPSS 2.14%Sep 5, 2007
- High7.5Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via di…Check if you run itEPSS 5.88%Sep 5, 2007
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 72.98%Aug 25, 2007
- Medium5.0The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service…Check this weekEPSS 12.90%Aug 23, 2007
- Medium6.8Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to exte…Check if you run itEPSS 1.34%Aug 20, 2007
- UnknownSkype Network Remote DoSPatch nowKEVEPSS 2.20%Aug 20, 2007
- UnknownLhaz 1.33 Arbitrary Code ExecutionPatch nowKEVEPSS 3.17%Aug 20, 2007
Sort