Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5CVE-2009-4711 is listed by inventory_high.Check if you run itEPSS 1.05%Mar 15, 2010
- High7.5SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL c…Check if you run itEPSS 1.05%Mar 15, 2010
- High7.5SQL injection vulnerability in the datamints Newsticker (datamints_newsticker) extension before 0.7.2 for TYPO3 allows remote attackers to execute arbitrary SQL comman…Check if you run itEPSS 1.00%Mar 15, 2010
- High7.5SQL injection vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arb…Check if you run itEPSS 1.01%Mar 15, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers t…Check if you run itEPSS 0.85%Mar 15, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML vi…Check if you run itEPSS 0.85%Mar 15, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 0.85%Mar 15, 2010
- Medium5.0Unspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.Check if you run itEPSS 1.08%Mar 15, 2010
- High7.5SQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands v…Check if you run itEPSS 1.01%Mar 15, 2010
- High7.5SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.01%Mar 15, 2010
- High7.5SQL injection vulnerability in the Myth download (myth_download) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.01%Mar 15, 2010
- High8.8Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…Check this weekEPSS 11.64%Mar 15, 2010
- High7.5SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.Check if you run itEPSS 1.11%Mar 10, 2010
- High8.8Microsoft Internet Explorer Use-After-Free VulnerabilityPatch nowKEVEPSS 82.12%Mar 10, 2010
- Medium4.0OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations,…Check if you run itEPSS 0.54%Mar 5, 2010
- Medium4.3The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in…Check this weekEPSS 18.44%Mar 5, 2010
- Medium4.3The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not chec…Check if you run itEPSS 7.86%Mar 5, 2010
- Critical10.0modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, doe…Check this weekEPSS 94.25%Mar 5, 2010
- Critical10.0OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.…Check if you run itEPSS 5.78%Mar 5, 2010
- Medium5.0The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in whic…Check this weekEPSS 20.89%Mar 5, 2010
- High7.5SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Mar 2, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 1.03%Mar 2, 2010
- High7.5greatjoomla scriptegrator_plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.24%Feb 27, 2010
- Low3.5CVE-2010-0716 is listed by inventory_critical.Check if you run itEPSS 8.49%Feb 26, 2010
- Medium5.1Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend…Check if you run itEPSS 1.29%Feb 22, 2010
Sort