Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted lite…Check this weekEPSS 37.24%May 8, 2007
- Medium6.8Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arb…Check this weekEPSS 33.15%May 8, 2007
- Critical10.0Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrar…Check this weekEPSS 68.45%May 8, 2007
- High7.8The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a deni…Check this weekEPSS 44.57%May 8, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 77.66%May 8, 2007
- UnknownWord Document Stream VulnerabilityPatch nowKEVEPSS 21.13%May 8, 2007
- Unknownwildbits mygallery Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 62.87%Apr 29, 2007
- High7.8The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows r…Check if you run itEPSS 8.32%Apr 25, 2007
- UnknownOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KECheck if you run itEPSS 2.40%Apr 25, 2007
- High7.6Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via par…Check this weekEPSS 83.80%Apr 24, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
- Critical10.0Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.Check if you run itEPSS 3.02%Apr 18, 2007
- Medium4.4suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- Low3.7suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local u…Check if you run itEPSS 0.69%Apr 13, 2007
- Medium6.2Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and…Check if you run itEPSS 0.52%Apr 13, 2007
- Unknownphpwiki phpwiki Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.28%Apr 12, 2007
- Medium5.0The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows…Check if you run itEPSS 2.63%Apr 10, 2007
- Critical10.0Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspe…Check if you run itEPSS 6.71%Apr 10, 2007
- Critical10.0Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 6.71%Apr 10, 2007
- High7.5Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 4.41%Apr 10, 2007
- Medium5.0CVE-2007-1913 is listed by apple.Check if you run itEPSS 2.30%Apr 10, 2007
- Unknownichitaro ichitaro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.50%Apr 10, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 73.15%Apr 3, 2007
Sort