Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownAdobe Acrobat and Reader Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 87.78%Feb 20, 2009
- High7.5Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary S…Check if you run itEPSS 1.06%Feb 16, 2009
- Medium4.3CVE-2008-6144 is listed by inventory_high.Check if you run itEPSS 1.03%Feb 16, 2009
- Medium6.5Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges vi…Check if you run itEPSS 1.50%Feb 13, 2009
- High7.5SQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the HotPot module in Moodle 1.6 before 1.6.7, 1.7 before 1.7.5, 1.8 before…Check if you run itEPSS 1.17%Feb 13, 2009
- Medium5.0Microsoft Exchange Server Improper Input ValidationPatch nowKEVEPSS 26.24%Feb 10, 2009
- Critical9.3Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties,…Check this weekEPSS 24.92%Feb 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9…Check if you run itEPSS 1.25%Feb 10, 2009
- Medium5.0Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "…Check if you run itEPSS 1.07%Feb 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers…Check if you run itEPSS 1.25%Feb 10, 2009
- Medium6.4Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete…Check if you run itEPSS 0.69%Feb 10, 2009
- Medium4.3Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http UR…Check if you run itEPSS 2.36%Jan 28, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows remote attackers to inject arb…Check if you run itEPSS 1.53%Jan 28, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.06%Jan 28, 2009
- Critical10.0The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execu…Check if you run itEPSS 3.31%Jan 22, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitra…Check if you run itEPSS 1.56%Jan 22, 2009
- High7.5Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hija…Check if you run itEPSS 1.79%Jan 22, 2009
- High7.5The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random s…Check if you run itEPSS 9.44%Jan 22, 2009
- High7.5SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a m…Check if you run itEPSS 1.86%Jan 22, 2009
- UnknownOpenOffice.org 1.1.2 through 1.1.5 Memory CorruptionPatch nowKEVEPSS 7.50%Jan 21, 2009
- Low2.1An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current login to a web site, which…Check if you run itEPSS 0.87%Jan 20, 2009
- High7.1Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the a…Check if you run itEPSS 1.67%Jan 15, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authe…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote…Check if you run itEPSS 0.90%Jan 14, 2009
Sort