Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop…Check if you run itEPSS 1.08%Aug 18, 2007
- UnknownJustsystem Ichitaro 2007 and earlier Remote Code ExecutionPatch nowKEVEPSS 3.08%Aug 17, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary…Check this weekEPSS 58.96%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value…Check this weekEPSS 16.94%Aug 14, 2007
- Medium4.3Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cau…Check this weekEPSS 37.50%Aug 14, 2007
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web…Check if you run itEPSS 3.17%Aug 8, 2007
- Low1.2The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users…Check if you run itEPSS 0.40%Aug 8, 2007
- Medium6.8Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of servi…Check if you run itEPSS 2.58%Aug 3, 2007
- Medium4.3WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support an…Check if you run itEPSS 2.44%Aug 3, 2007
- Medium6.8WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets…Check if you run itEPSS 1.43%Aug 3, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4…Check if you run itEPSS 9.48%Jul 25, 2007
- Critical9.3Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update…Check if you run itEPSS 6.53%Jul 23, 2007
- Medium4.6Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local users to have unknown impact v…Check if you run itEPSS 0.42%Jul 18, 2007
- High7.5Multiple unspecified vulnerabilities in the Customer Relationship Management Online Marketing component in Oracle PeopleSoft Enterprise 8.9 Bundle 26 and 9.0 Bundle 7…Check if you run itEPSS 2.74%Jul 18, 2007
- Medium6.5Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attacke…Check if you run itEPSS 2.10%Jul 18, 2007
- UnknownInteger overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to anCheck this weekEPSS 70.39%Jul 16, 2007
- High7.5Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact.Check if you run itEPSS 1.56%Jul 12, 2007
- Unknownlhaca file_archiver Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.70%Jul 6, 2007
- Medium4.3CVE-2007-3555 is listed by inventory_high.Check if you run itEPSS 2.95%Jul 4, 2007
- High8.5CVE-2007-3514 is listed by apple.Check if you run itEPSS 1.33%Jul 3, 2007
- High7.8Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other do…Check if you run itEPSS 1.50%Jun 28, 2007
- Medium5.0cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attacke…Check this weekEPSS 11.79%Jun 27, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-sta…Check this weekEPSS 27.78%Jun 27, 2007
- Critical9.3Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…Check if you run itEPSS 5.54%Jun 25, 2007
- Medium4.3CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers v…Check if you run itEPSS 7.06%Jun 25, 2007
Sort