Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an e…Check if you run itEPSS 3.77%Apr 21, 2006
- Medium5.1Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary co…Check this weekEPSS 13.91%Apr 21, 2006
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln# PSE01.Check if you run itEPSS 4.67%Apr 20, 2006
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 68.34%Apr 11, 2006
- Medium5.0Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JP…Check if you run itEPSS 4.36%Mar 31, 2006
- High7.5Apache Struts 1 ActionForm Denial-of-Service VulnerabilityPatch nowKEVEPSS 54.63%Mar 30, 2006
- UnknownMicrosoft Office Out-of-bounds WritePatch nowKEVEPSS 14.21%Mar 14, 2006
- Medium4.6MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_r…Check if you run itEPSS 1.37%Feb 27, 2006
- Low2.1MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query…Check if you run itEPSS 0.80%Jan 22, 2006
- Medium5.0TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to in…Check if you run itEPSS 2.37%Jan 21, 2006
- High7.5Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute…Check this weekEPSS 45.58%Jan 10, 2006
- High7.5Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3…Check this weekEPSS 13.06%Jan 9, 2006
- High7.5The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpe…Check this weekEPSS 13.24%Jan 9, 2006
- High7.5TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints v…Check if you run itEPSS 1.38%Dec 31, 2005
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web…Check if you run itEPSS 7.85%Dec 31, 2005
- High7.8The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to rea…Check if you run itEPSS 3.47%Dec 31, 2005
- Medium5.0Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such…Check this weekEPSS 25.67%Dec 31, 2005
- Medium5.0Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the m…Check if you run itEPSS 1.03%Dec 31, 2005
- Medium5.4mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial…Check this weekEPSS 24.29%Dec 31, 2005
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 86.09%Dec 28, 2005
- UnknownIceWarp Web Mail HTTP_USER_AGENT VulnerabilityPatch nowKEVEPSS 8.60%Dec 27, 2005
- UnknownIceWarp Web Mail Language Parameter PHP Code VulnerabilityPatch nowKEVEPSS 8.49%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.48%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.57%Dec 27, 2005
- High7.8The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to caus…Check this weekEPSS 11.91%Dec 22, 2005
Sort