Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow re…Check this weekEPSS 37.68%Jul 7, 2004
- Critical9.8k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leCheck if you run itEPSS 7.16%Jul 7, 2004
- Low2.1The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.Check if you run itEPSS 0.56%Jun 1, 2004
- UnknownMicrosoft netmeeting Out-of-bounds WritePatch nowKEVEPSS 85.60%May 13, 2004
- Low2.1mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.Check if you run itEPSS 0.63%May 4, 2004
- High7.5Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (…Check this weekEPSS 11.55%May 4, 2004
- Medium4.3Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.Check if you run itEPSS 1.99%Apr 30, 2004
- Medium5.0Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files…Check this weekEPSS 15.76%Apr 15, 2004
- High7.5Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in…Check if you run itEPSS 5.45%Apr 15, 2004
- Medium5.0Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests…Check this weekEPSS 11.01%Mar 29, 2004
- High7.5mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which…Check this weekEPSS 10.84%Mar 29, 2004
- Low2.1mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensit…Check if you run itEPSS 3.50%Mar 20, 2004
- High7.5mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.Check if you run itEPSS 5.56%Mar 3, 2004
- UnknownMicrosoft Outlook Express MHTML URL Processing VulnerabilityPatch nowKEVEPSS 63.25%Feb 13, 2004
- High7.5mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.Check if you run itEPSS 7.58%Feb 3, 2004
- UnknownBuffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.Check if you run itEPSS 8.62%Feb 3, 2004
- UnknownMultiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.Check if you run itEPSS 2.79%Jan 20, 2004
- Medium6.0Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users t…Check if you run itEPSS 8.12%Jan 20, 2004
- Medium4.3MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.Check if you run itEPSS 2.67%Dec 31, 2003
- Medium4.3Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or…Check if you run itEPSS 6.86%Dec 31, 2003
- Medium4.0CVE-2003-1331 is listed by oracle.Check if you run itEPSS 3.28%Dec 31, 2003
- Medium4.3The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's fi…Check if you run itEPSS 1.72%Dec 31, 2003
- UnknownLinux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 3.92%Dec 19, 2003
- Medium5.0Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded nul…Check if you run itEPSS 1.51%Dec 15, 2003
- Medium5.0OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.Check if you run itEPSS 6.07%Dec 1, 2003
Sort