Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously…Check if you run itEPSS 1.64%Nov 25, 2008
- High7.1ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and dev…Check if you run itEPSS 2.53%Nov 25, 2008
- Unknownphpcow phpcow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.69%Nov 25, 2008
- Medium6.9spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-…Check if you run itEPSS 0.39%Nov 18, 2008
- Medium4.3The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive infor…Check if you run itEPSS 8.60%Nov 17, 2008
- Low1.9Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive in…Check if you run itEPSS 0.32%Nov 17, 2008
- Critical9.3Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 all…Check if you run itEPSS 8.34%Nov 17, 2008
- Medium5.0Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors.Check if you run itEPSS 1.21%Nov 14, 2008
- High7.5SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via un…Check if you run itEPSS 1.00%Nov 14, 2008
- Medium4.3Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows r…Check this weekEPSS 27.75%Nov 12, 2008
- Low3.5Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allo…Check if you run itEPSS 9.38%Nov 10, 2008
- High7.8Adobe Reader and Acrobat Input Validation VulnerabilityPatch nowKEVEPSS 99.79%Nov 4, 2008
- UnknownMicrosoft Internet Information Services (IIS) Integer Overflow or WraparoundPatch nowKEVEPSS 46.27%Oct 29, 2008
- Critical9.8Microsoft Windows Buffer Overflow VulnerabilityPatch nowKEVEPSS 98.75%Oct 23, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitra…Check if you run itEPSS 1.02%Oct 22, 2008
- High7.5SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Oct 22, 2008
- High7.5SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands…Check if you run itEPSS 1.05%Oct 22, 2008
- High7.5SQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unsp…Check if you run itEPSS 1.10%Oct 22, 2008
- High7.5SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Oct 22, 2008
- High7.5SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands vi…Check if you run itEPSS 1.05%Oct 22, 2008
- High7.5SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via uns…Check if you run itEPSS 1.06%Oct 22, 2008
- Medium4.3Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to…Check this weekEPSS 48.14%Oct 21, 2008
- Critical9.3Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer…Check this weekEPSS 34.41%Oct 15, 2008
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 59.00%Oct 15, 2008
- Low3.2Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1…Check if you run itEPSS 0.30%Oct 14, 2008
Sort