Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Cursor, Animated Cursor, and Icon Processing VulnerabilityPatch nowKEVEPSS 54.85%Mar 30, 2007
- High7.8Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attacke…Check if you run itEPSS 3.51%Mar 24, 2007
- Medium5.0Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, m…Check this weekEPSS 91.16%Mar 16, 2007
- High7.5Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utf…Check if you run itEPSS 1.41%Mar 13, 2007
- Low2.1MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a…Check if you run itEPSS 1.03%Mar 12, 2007
- UnknownMutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing between signed and unsigned portions ofCheck if you run itEPSS 2.83%Mar 6, 2007
- UnknownMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into savingCheck if you run itEPSS 1.51%Feb 23, 2007
- High7.5The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors.Check if you run itEPSS 1.44%Feb 22, 2007
- UnknownClam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumpCheck if you run itEPSS 3.50%Feb 16, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 2.74%Feb 13, 2007
- UnknownWord Malformed Function VulnerabilityPatch nowKEVEPSS 39.20%Feb 13, 2007
- UnknownMicrosoft Word Count VulnerabilityPatch nowKEVEPSS 41.27%Feb 13, 2007
- UnknownWord Malformed Data Structures VulnerabilityPatch nowKEVEPSS 32.16%Feb 13, 2007
- UnknownWord Malformed String VulnerabilityPatch nowKEVEPSS 33.72%Feb 13, 2007
- High8.8Microsoft Office Excel Remote Code Execution VulnerabilityPatch nowKEVEPSS 44.10%Feb 2, 2007
- High7.1Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (…Check this weekEPSS 10.44%Feb 1, 2007
- High7.1Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in fi…Check if you run itEPSS 2.65%Feb 1, 2007
- Medium4.3WebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML comments in TITLE elements, which allows remote attackers to conduct cros…Check if you run itEPSS 1.71%Jan 25, 2007
- High7.5CVE-2007-0342 is listed by apple.Check if you run itEPSS 4.55%Jan 18, 2007
- Medium4.0Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.Check if you run itEPSS 3.82%Jan 17, 2007
- Low2.1Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 has unknown impact and attack vectors in PeopleToo…Check if you run itEPSS 0.53%Jan 17, 2007
- High7.8Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vectors in PeopleTools, aka PSE01.Check if you run itEPSS 2.50%Jan 17, 2007
- UnknownMicrosoft Windows Integer Overflow or WraparoundPatch nowKEVEPSS 44.19%Jan 9, 2007
- UnknownMicrosoft Visual Studio 2005 WMI Object Broker VulnerabilityPatch nowKEVEPSS 45.59%Jan 9, 2007
- High7.8The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consum…Check this weekEPSS 10.17%Jan 5, 2007
Sort