Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 96.65%Oct 19, 2011
- Medium6.8The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers…Check if you run itEPSS 1.09%Oct 19, 2011
- Medium5.0Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct…Check if you run itEPSS 2.37%Oct 19, 2011
- Medium5.0The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request,…Check if you run itEPSS 2.41%Oct 19, 2011
- Medium5.0CVE-2011-4137 is listed by inventory_high.Check if you run itEPSS 3.02%Oct 19, 2011
- Medium5.8django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers a…Check if you run itEPSS 2.28%Oct 19, 2011
- Unknownfreepbx FreePBX Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 43.90%Oct 18, 2011
- High7.8Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation VulnerabilityPatch nowKEVEPSS 31.76%Oct 11, 2011
- High7.5Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.Check if you run itEPSS 1.86%Oct 9, 2011
- High7.5SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.08%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch) extension before 0.9.1 for TYPO3 allows remote attackers to inject a…Check if you run itEPSS 1.22%Oct 9, 2011
- High7.5SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unsp…Check if you run itEPSS 1.26%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to inject arbitrary web scrip…Check if you run itEPSS 1.22%Oct 9, 2011
- Critical10.0Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.Check if you run itEPSS 3.28%Oct 9, 2011
- High7.5SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.08%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 1.04%Oct 9, 2011
- High7.5SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.00%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 1.04%Oct 7, 2011
- High7.5SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.07%Oct 7, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 1.04%Oct 7, 2011
- Critical10.0Unspecified vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows attackers to execute arbitrary code via unknown vectors.Check if you run itEPSS 2.12%Oct 7, 2011
- High7.5SQL injection vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unsp…Check if you run itEPSS 1.01%Oct 7, 2011
- High7.5SQL injection vulnerability in the Commenting system Backend Module (commentsbe) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL…Check if you run itEPSS 1.01%Oct 7, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the "official twitter tweet button for your page" (tweetbutton) extension before 1.0.5 for TYPO3 allows remote attackers to…Check if you run itEPSS 1.05%Oct 7, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the XING Button (xing) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via…Check if you run itEPSS 1.05%Oct 7, 2011
Sort