Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users t…Check if you run itEPSS 6.33%Dec 21, 2006
- Medium6.8CVE-2006-6626 is listed by inventory_high.Check if you run itEPSS 1.29%Dec 18, 2006
- Medium6.8Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter.Check if you run itEPSS 2.06%Dec 18, 2006
- Medium5.0CVE-2006-6238 is listed by apple.Check if you run itEPSS 1.44%Dec 3, 2006
- UnknownMicrosoft XML Core Services VulnerabilityPatch nowKEVEPSS 77.59%Nov 14, 2006
- UnknownMicrosoft Internet Explorer Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 79.92%Nov 14, 2006
- UnknownMicrosoft Internet Explorer Out-of-bounds WritePatch nowKEVEPSS 62.24%Nov 14, 2006
- Critical9.0Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unknown impact and remote authe…Check if you run itEPSS 2.90%Oct 18, 2006
- Critical9.0Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.0…Check if you run itEPSS 2.90%Oct 18, 2006
- Critical10.0Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown imp…Check if you run itEPSS 2.87%Oct 18, 2006
- Medium6.8Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are…Check this weekEPSS 16.42%Oct 16, 2006
- Medium5.1SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter.Check if you run itEPSS 2.24%Oct 10, 2006
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 13.21%Oct 10, 2006
- UnknownMicrosoft Word Malformed Stack VulnerabilityPatch nowKEVEPSS 34.49%Oct 10, 2006
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 63.57%Oct 10, 2006
- Medium4.3The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denia…Check this weekEPSS 19.41%Sep 28, 2006
- Critical10.0Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote atta…Check this weekEPSS 49.91%Sep 28, 2006
- High7.8OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with l…Check if you run itEPSS 5.10%Sep 28, 2006
- High7.8OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 str…Check this weekEPSS 11.04%Sep 28, 2006
- Low2.6Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers…Check if you run itEPSS 1.37%Sep 28, 2006
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 61.44%Sep 26, 2006
- Medium5.0course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers…Check if you run itEPSS 1.25%Sep 23, 2006
- Medium4.6Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top l…Check if you run itEPSS 0.89%Sep 23, 2006
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose param…Check if you run itEPSS 1.00%Sep 23, 2006
- Medium5.0login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action.Check if you run itEPSS 1.25%Sep 23, 2006
Sort