Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The installation of Microsoft Exchange 2000 before Rev.Check if you run itEPSS 5.02%Jan 9, 2001
- Medium4.6The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the s…Check if you run itEPSS 2.84%Jan 9, 2001
- Medium4.6The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_pa…Check if you run itEPSS 5.29%Jan 9, 2001
- Medium4.6The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_para…Check if you run itEPSS 2.83%Jan 9, 2001
- Low2.1The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminf…Check if you run itEPSS 5.49%Jan 9, 2001
- Medium4.6The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_par…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_…Check if you run itEPSS 5.25%Jan 9, 2001
- High7.5SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the…Check if you run itEPSS 1.93%Dec 31, 2000
- Medium5.0The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privi…Check if you run itEPSS 4.83%Dec 31, 2000
- Medium4.6Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.Check if you run itEPSS 1.36%Dec 19, 2000
- Medium4.6Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privi…Check if you run itEPSS 2.31%Dec 19, 2000
- Medium5.0Cisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%Dec 19, 2000
- High7.2MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.Check if you run itEPSS 1.93%Dec 19, 2000
- Medium5.0mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contai…Check this weekEPSS 35.64%Dec 19, 2000
- Critical10.0The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and…Check if you run itEPSS 4.74%Dec 19, 2000
- Medium5.0Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a c…Check this weekEPSS 14.79%Dec 11, 2000
- Medium5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.Check this weekEPSS 50.95%Nov 14, 2000
- Medium5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested UR…Check this weekEPSS 44.72%Nov 14, 2000
- Medium6.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.Check this weekEPSS 62.50%Oct 20, 2000
- Medium6.4Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that incl…Check this weekEPSS 25.66%Oct 20, 2000
- Medium5.0Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if t…Check this weekEPSS 10.43%Oct 13, 2000
- Medium5.0The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling t…Check this weekEPSS 10.03%Jul 20, 2000
- Medium4.6Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a…Check if you run itEPSS 1.38%Jul 11, 2000
Sort