Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.Check if you run itEPSS 1.41%Dec 31, 2004
- High7.5Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.Check if you run itEPSS 1.13%Dec 31, 2004
- Critical10.0Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.Check if you run itEPSS 1.75%Dec 31, 2004
- High7.5SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.Check if you run itEPSS 1.37%Dec 31, 2004
- UnknownCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercaCheck if you run itEPSS 2.07%Dec 31, 2004
- Medium5.0Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number…Check if you run itEPSS 5.57%Dec 31, 2004
- Medium5.0Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.Check this weekEPSS 25.64%Dec 31, 2004
- Medium5.0Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a ..Check if you run itEPSS 1.82%Dec 31, 2004
- Medium4.3Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.Check if you run itEPSS 1.30%Dec 31, 2004
- Low2.1The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.Check if you run itEPSS 0.55%Dec 31, 2004
- High7.5Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary t…Check if you run itEPSS 7.59%Dec 31, 2004
- Medium5.0Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered…Check if you run itEPSS 4.18%Dec 31, 2004
- Medium5.9Cisco IOS Denial-of-Service VulnerabilityPatch nowKEVEPSS 4.84%Dec 30, 2004
- Medium5.0Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.Check if you run itEPSS 3.19%Dec 6, 2004
- Unknownavaya ip600_media_servers Out-of-bounds WritePatch nowKEVEPSS 67.06%Dec 1, 2004
- Medium5.0The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large s…Check if you run itEPSS 7.04%Nov 23, 2004
- Medium5.0PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have differ…Check if you run itEPSS 3.89%Nov 23, 2004
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof cont…Check this weekEPSS 20.98%Nov 23, 2004
- Medium5.0The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a h…Check this weekEPSS 10.42%Nov 23, 2004
- Medium5.0OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated…Check if you run itEPSS 7.23%Nov 23, 2004
- High7.5The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake tCheck if you run itEPSS 9.54%Nov 23, 2004
- UnknownMicrosoft Internet Explorer Popup.show Method VulnerabilityPatch nowKEVEPSS 48.73%Nov 9, 2004
- UnknownMicrosoft Internet Explorer Arbitrary Program Installation VulnerabilityPatch nowKEVEPSS 33.99%Nov 9, 2004
- UnknownMicrosoft Internet Explorer Similar Method Name Redirection Cross Domain VulnerabilityPatch nowKEVEPSS 39.78%Nov 9, 2004
- High7.5The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intende…Check this weekEPSS 15.36%Nov 3, 2004
Sort