Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HT…Check if you run itEPSS 1.26%May 2, 2005
- Medium5.0The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs…Check if you run itEPSS 1.65%May 2, 2005
- High7.5The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE da…Check this weekEPSS 33.36%May 2, 2005
- Medium5.8Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.Check this weekEPSS 25.56%Apr 27, 2005
- Critical9.8Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width anCheck if you run itEPSS 3.38%Apr 15, 2005
- Medium4.6The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrar…Check if you run itEPSS 0.60%Apr 14, 2005
- UnknownMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.Check if you run itEPSS 2.55%Apr 14, 2005
- Medium5.0MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed…Check if you run itEPSS 2.53%Mar 15, 2005
- UnknownInteger underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppCheck if you run itEPSS 2.70%Mar 1, 2005
- Low2.1The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink atta…Check if you run itEPSS 0.41%Feb 9, 2005
- Medium6.8Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other…Check if you run itEPSS 2.43%Feb 9, 2005
- Medium5.0Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multip…Check this weekEPSS 58.73%Feb 9, 2005
- High7.8Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apac…Check if you run itEPSS 4.83%Feb 9, 2005
- UnknownMicrosoft Internet Explorer Drag-and-Drop VulnerabilityPatch nowKEVEPSS 59.78%Feb 8, 2005
- UnknownDHTML Editing Component ActiveX Control VulnerabilityPatch nowKEVEPSS 26.92%Feb 8, 2005
- UnknownMicrosoft asp.net Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.70%Feb 8, 2005
- UnknownMicrosoft Internet Explorer HTML Help ActiveX control Cross Domain VulnerabilityPatch nowKEVEPSS 44.98%Jan 11, 2005
- High7.5CVE-2004-1314 is listed by apple.Check if you run itEPSS 2.36%Jan 10, 2005
- UnknownStack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.Check this weekEPSS 11.40%Jan 10, 2005
- Medium5.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code…Check if you run itEPSS 1.65%Jan 10, 2005
- High7.5CVE-2004-1122 is listed by apple.Check if you run itEPSS 2.34%Jan 10, 2005
- Medium5.0MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.Check if you run itEPSS 3.72%Jan 10, 2005
- High7.2Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by us…Check if you run itEPSS 0.60%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."Check if you run itEPSS 1.69%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.Check if you run itEPSS 1.41%Dec 31, 2004
Sort