Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0CVE-2003-0083 is listed by inventory_critical.Check this weekEPSS 19.15%Apr 2, 2003
- Medium5.0OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing difference…Check if you run itEPSS 7.06%Mar 31, 2003
- Critical9.0MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a con…Check this weekEPSS 44.83%Mar 24, 2003
- High7.5The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified…Check if you run itEPSS 6.94%Mar 24, 2003
- Medium5.0Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators contai…Check this weekEPSS 16.46%Mar 18, 2003
- Medium5.0ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which ca…Check this weekEPSS 13.72%Mar 3, 2003
- High7.5Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.Check if you run itEPSS 1.83%Mar 3, 2003
- Medium5.0Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.Check if you run itEPSS 2.99%Feb 19, 2003
- Medium5.0Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request fo…Check if you run itEPSS 2.49%Feb 7, 2003
- Medium6.8Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to i…Check if you run itEPSS 9.13%Feb 7, 2003
- Medium5.0Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read…Check if you run itEPSS 4.51%Feb 7, 2003
- Medium5.0Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain…Check this weekEPSS 46.03%Feb 7, 2003
- Medium5.0Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">",…Check if you run itEPSS 6.44%Feb 7, 2003
- High7.5Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via…Check this weekEPSS 17.76%Feb 7, 2003
- High7.5Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass ce…Check if you run itEPSS 5.85%Jan 17, 2003
- Medium5.0The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Ma…Check if you run itEPSS 1.27%Dec 31, 2002
- High7.8Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications)…Check if you run itEPSS 9.68%Dec 31, 2002
- Medium5.0Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which…Check if you run itEPSS 6.06%Dec 31, 2002
- High7.5PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary pro…Check this weekEPSS 23.11%Dec 31, 2002
- Medium5.0Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.Check if you run itEPSS 6.00%Dec 31, 2002
- Medium5.0Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks t…Check if you run itEPSS 7.31%Dec 31, 2002
- Medium5.0Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks t…Check if you run itEPSS 7.11%Dec 31, 2002
- Medium5.0The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path,…Check this weekEPSS 41.40%Dec 31, 2002
- Medium5.0The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system info…Check this weekEPSS 30.67%Dec 31, 2002
- Medium5.0Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures,…Check if you run itEPSS 4.58%Dec 31, 2002
Sort