Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such…Check this weekEPSS 25.67%Dec 31, 2005
- Medium5.0Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the m…Check if you run itEPSS 1.03%Dec 31, 2005
- Medium5.4mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial…Check this weekEPSS 24.29%Dec 31, 2005
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 86.09%Dec 28, 2005
- UnknownIceWarp Web Mail HTTP_USER_AGENT VulnerabilityPatch nowKEVEPSS 8.60%Dec 27, 2005
- UnknownIceWarp Web Mail Language Parameter PHP Code VulnerabilityPatch nowKEVEPSS 8.49%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.48%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.57%Dec 27, 2005
- High7.8The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to caus…Check this weekEPSS 11.91%Dec 22, 2005
- Medium6.3SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs pCheck if you run itEPSS 1.39%Dec 19, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to i…Check this weekEPSS 73.69%Dec 13, 2005
- UnknownMicrosoft Internet Explorer Javascript BODY onload VulnerabilityPatch nowKEVEPSS 83.47%Dec 13, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web scri…Check if you run itEPSS 1.21%Dec 3, 2005
- High7.8Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function.Check if you run itEPSS 1.31%Nov 29, 2005
- Unknownmambo mambo_site_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.88%Nov 22, 2005
- Low2.6jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.Check if you run itEPSS 3.06%Nov 17, 2005
- High7.5Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id pa…Check if you run itEPSS 2.50%Nov 17, 2005
- Medium5.0Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web director…Check if you run itEPSS 5.95%Nov 6, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE04.Check if you run itEPSS 3.77%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE03.Check if you run itEPSS 5.14%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02.Check if you run itEPSS 3.77%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE01.Check if you run itEPSS 2.96%Nov 2, 2005
- Medium5.0Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they ca…Check if you run itEPSS 1.09%Oct 26, 2005
- Medium5.0Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted…Check this weekEPSS 14.19%Oct 25, 2005
- High7.3Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an evalCheck if you run itEPSS 3.88%Oct 24, 2005
Sort