Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denia…Check this weekEPSS 19.41%Sep 28, 2006
- Critical10.0Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote atta…Check this weekEPSS 49.91%Sep 28, 2006
- High7.8OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with l…Check if you run itEPSS 5.10%Sep 28, 2006
- High7.8OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 str…Check this weekEPSS 11.04%Sep 28, 2006
- Low2.6Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers…Check if you run itEPSS 1.37%Sep 28, 2006
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 61.44%Sep 26, 2006
- Medium5.0course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers…Check if you run itEPSS 1.25%Sep 23, 2006
- Medium4.6Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top l…Check if you run itEPSS 0.89%Sep 23, 2006
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose param…Check if you run itEPSS 1.00%Sep 23, 2006
- Medium5.0login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action.Check if you run itEPSS 1.25%Sep 23, 2006
- Medium5.0backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to o…Check if you run itEPSS 1.05%Sep 23, 2006
- Medium4.0help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the pa…Check if you run itEPSS 1.00%Sep 23, 2006
- Medium4.0lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote…Check if you run itEPSS 1.00%Sep 23, 2006
- Critical10.0Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.Check if you run itEPSS 1.51%Sep 23, 2006
- Critical10.0The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.Check if you run itEPSS 1.49%Sep 23, 2006
- High7.5codeworx_technologies dcp-portal Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.86%Sep 15, 2006
- Medium5.0Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.Check if you run itEPSS 1.42%Sep 14, 2006
- High7.5SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored i…Check if you run itEPSS 3.05%Sep 14, 2006
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified par…Check if you run itEPSS 1.21%Sep 14, 2006
- Critical9.1OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attaCheck if you run itEPSS 3.95%Sep 5, 2006
- Unknownsendmail sendmail Use After FreePatch nowKEVEPSS 4.55%Aug 29, 2006
- Unknownjustsystem formliner Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.56%Aug 22, 2006
- Medium6.5MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which…Check this weekEPSS 13.57%Aug 18, 2006
- Low3.6MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database…Check if you run itEPSS 3.07%Aug 18, 2006
- High7.5CVE-2006-4112 is listed by inventory_high.Check if you run itEPSS 3.12%Aug 14, 2006
Sort