Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5CVE-2006-4111 is listed by inventory_high.Check if you run itEPSS 2.33%Aug 14, 2006
- Medium4.3Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters…Check this weekEPSS 39.97%Aug 14, 2006
- Low2.1MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revo…Check if you run itEPSS 1.74%Aug 9, 2006
- UnknownMicrosoft visual_basic Out-of-bounds WritePatch nowKEVEPSS 10.17%Aug 8, 2006
- UnknownMicrosoft PowerPoint Mso.dll VulnerabilityPatch nowKEVEPSS 14.26%Aug 8, 2006
- High7.5WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted H…Check if you run itEPSS 5.30%Jul 31, 2006
- High7.6Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when Rewr…Check this weekEPSS 97.13%Jul 28, 2006
- Medium4.3http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.…Check this weekEPSS 95.14%Jul 28, 2006
- Medium5.0Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs end…Check this weekEPSS 48.05%Jul 25, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknow…Check if you run itEPSS 4.07%Jul 21, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact…Check if you run itEPSS 4.07%Jul 21, 2006
- Medium4.0Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (cr…Check this weekEPSS 31.06%Jul 21, 2006
- Medium5.0Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet memory consumption and cra…Check if you run itEPSS 4.32%Jul 12, 2006
- UnknownMicrosoft Excel Malformed file VulnerabilityPatch nowKEVEPSS 41.11%Jul 11, 2006
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 28.63%Jul 11, 2006
- UnknownMicrosoft Excel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.79%Jul 11, 2006
- Low2.1Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 befo…Check if you run itEPSS 0.65%Jul 10, 2006
- Medium5.0Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which…Check if you run itEPSS 9.20%Jul 6, 2006
- Medium5.0secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId pa…Check if you run itEPSS 1.39%Jul 3, 2006
- Low2.6Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direc…Check if you run itEPSS 1.29%Jul 3, 2006
- UnknownStack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and pCheck if you run itEPSS 4.31%Jun 28, 2006
- Medium5.4Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop.Check if you run itEPSS 1.14%Jun 26, 2006
- Medium4.0mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second…Check this weekEPSS 25.80%Jun 19, 2006
- Low2.6Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attacker…Check this weekEPSS 39.78%Jun 13, 2006
- High7.5SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multi…Check if you run itEPSS 3.54%Jun 1, 2006
Sort