Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or…Check if you run itEPSS 1.25%Sep 30, 2009
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or…Check if you run itEPSS 1.25%Sep 30, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML vi…Check if you run itEPSS 1.45%Sep 30, 2009
- High7.5iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-m…Check if you run itEPSS 0.93%Sep 21, 2009
- Medium4.3Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.Check if you run itEPSS 4.21%Sep 21, 2009
- High7.8The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (N…Check if you run itEPSS 2.47%Sep 10, 2009
- Medium5.0The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Refe…Check if you run itEPSS 3.87%Sep 10, 2009
- Low2.1The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo de…Check if you run itEPSS 0.36%Sep 10, 2009
- High7.2Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the pa…Check if you run itEPSS 0.37%Sep 10, 2009
- Medium4.6The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock"…Check if you run itEPSS 0.26%Sep 10, 2009
- Low2.1The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might all…Check if you run itEPSS 0.34%Sep 10, 2009
- Medium6.8Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, al…Check if you run itEPSS 4.63%Sep 10, 2009
- Medium5.0The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vect…Check this weekEPSS 13.55%Sep 8, 2009
- Low2.6The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cau…Check if you run itEPSS 8.57%Sep 8, 2009
- UnknownUUSee UUUpgrade ActiveX control Remote File ManipulationPatch nowKEVEPSS 5.65%Sep 8, 2009
- High7.8Linux Kernel NULL Pointer DereferencePatch nowKEVEPSS 7.12%Aug 27, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server (Java) 7.0 allows remote attackers to inject arbi…Check if you run itEPSS 2.06%Aug 21, 2009
- Medium5.9Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 3.31%Aug 19, 2009
- Medium6.4MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request.Check if you run itEPSS 9.18%Aug 19, 2009
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 24.66%Aug 18, 2009
- High7.8Linux Kernel Use of Uninitialized ResourcePatch nowKEVEPSS 14.63%Aug 14, 2009
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 51.32%Aug 13, 2009
- Medium5.8Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms,…Check if you run itEPSS 2.59%Aug 12, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.Check if you run itEPSS 1.03%Aug 11, 2009
- Medium4.3Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified re…Check if you run itEPSS 1.09%Aug 11, 2009
Sort