Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof cont…Check this weekEPSS 20.98%Nov 23, 2004
- Medium5.0The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a h…Check this weekEPSS 10.42%Nov 23, 2004
- Medium5.0OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated…Check if you run itEPSS 7.23%Nov 23, 2004
- High7.5The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake tCheck if you run itEPSS 9.54%Nov 23, 2004
- UnknownMicrosoft Internet Explorer Popup.show Method VulnerabilityPatch nowKEVEPSS 48.73%Nov 9, 2004
- UnknownMicrosoft Internet Explorer Arbitrary Program Installation VulnerabilityPatch nowKEVEPSS 33.99%Nov 9, 2004
- UnknownMicrosoft Internet Explorer Similar Method Name Redirection Cross Domain VulnerabilityPatch nowKEVEPSS 39.78%Nov 9, 2004
- High7.5The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intende…Check this weekEPSS 15.36%Nov 3, 2004
- Critical10.0The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Ro…Check this weekEPSS 30.15%Nov 3, 2004
- Low2.6MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.Check if you run itEPSS 4.90%Nov 3, 2004
- Critical10.0Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possi…Check if you run itEPSS 9.80%Nov 3, 2004
- High7.5MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target tabl…Check this weekEPSS 22.35%Nov 3, 2004
- Critical10.0The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Se…Check this weekEPSS 67.82%Nov 3, 2004
- Medium5.0Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.Check if you run itEPSS 4.43%Nov 1, 2004
- Medium5.0The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a cer…Check this weekEPSS 24.07%Oct 20, 2004
- UnknownDouble free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.Check if you run itEPSS 6.99%Oct 20, 2004
- Medium5.0The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service…Check this weekEPSS 72.31%Oct 20, 2004
- Medium5.0mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apach…Check this weekEPSS 24.66%Oct 20, 2004
- High7.8Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.Check if you run itEPSS 1.61%Oct 20, 2004
- High7.5mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.Check if you run itEPSS 3.21%Sep 28, 2004
- Medium4.6The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a sym…Check if you run itEPSS 0.52%Sep 28, 2004
- Medium5.0The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for…Check this weekEPSS 17.16%Sep 16, 2004
- UnknownWinamp .wsz Skin File VulnerabilityPatch nowKEVEPSS 2.54%Aug 25, 2004
- Medium5.0TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP c…Check this weekEPSS 80.29%Aug 18, 2004
- Medium4.3Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.Check if you run itEPSS 1.27%Aug 6, 2004
Sort