Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 93.11%Aug 9, 2005
- Medium5.0Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a den…Check if you run itEPSS 8.39%Aug 5, 2005
- Critical9.8Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.Check this weekEPSS 11.01%Jul 18, 2005
- Low2.6Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box fr…Check if you run itEPSS 1.85%Jul 13, 2005
- Critical10.0Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.Check if you run itEPSS 1.51%Jul 12, 2005
- UnknownMicrosoft IE 5.01 SP4 up to 6 javaprxy.dll COM Instantiation Heap Corruption VulnerabilityPatch nowKEVEPSS 61.37%Jul 12, 2005
- UnknownMicrosoft image_color_management Out-of-bounds WritePatch nowKEVEPSS 49.92%Jul 12, 2005
- Medium4.3Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and cond…Check this weekEPSS 26.11%Jul 5, 2005
- Medium4.3The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application fi…Check this weekEPSS 20.46%Jul 5, 2005
- UnknownVeritas Backup Exec Agent Out-of-bounds WritePatch nowKEVEPSS 86.37%Jun 24, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script…Check this weekEPSS 14.22%Jun 14, 2005
- Medium5.1The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to…Check if you run itEPSS 0.74%May 26, 2005
- Medium5.3Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, whichCheck if you run itEPSS 1.91%May 20, 2005
- Medium4.6mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allow…Check if you run itEPSS 0.61%May 17, 2005
- Low2.6Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.Check if you run itEPSS 2.20%May 3, 2005
- High7.5Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.Check this weekEPSS 29.10%May 2, 2005
- Medium4.7Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissionCheck if you run itEPSS 0.31%May 2, 2005
- Medium5.0AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XM…Check if you run itEPSS 1.82%May 2, 2005
- Medium5.0phpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%May 2, 2005
- Medium5.0Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.Check this weekEPSS 23.44%May 2, 2005
- Medium5.0Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply neste…Check if you run itEPSS 4.53%May 2, 2005
- Low2.1MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE priv…Check if you run itEPSS 1.64%May 2, 2005
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute a…Check this weekEPSS 12.41%May 2, 2005
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTIO…Check this weekEPSS 17.84%May 2, 2005
- High7.5Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execu…Check this weekEPSS 69.48%May 2, 2005
Sort