Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownAdobe Flash Player 9.0.124.0 and earlier System.setClipboard method in ActionScript VulnerabilityPatch nowKEVEPSS 16.97%Aug 29, 2008
- Medium6.5libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial…Check if you run itEPSS 2.51%Aug 27, 2008
- UnknownOpenBSD openssh Improper Input ValidationPatch nowKEVEPSS 2.37%Aug 22, 2008
- UnknownMicrosoft visual_basic Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 55.92%Aug 18, 2008
- UnknownJoomla! components/com_user/models/reset.php First Enabled User VulnerabilityPatch nowKEVEPSS 9.47%Aug 15, 2008
- Medium4.3CVE-2008-2938 is listed by inventory_critical.Check this weekEPSS 99.71%Aug 13, 2008
- Critical9.3Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pa…Check this weekEPSS 35.65%Aug 12, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Ap…Check this weekEPSS 38.95%Aug 6, 2008
- High8.8Oracle VirtualBox Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 6.88%Aug 5, 2008
- Medium5.0Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the q…Check this weekEPSS 52.72%Aug 4, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitr…Check this weekEPSS 75.87%Aug 4, 2008
- Medium4.3Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct request to (1) blog/blogpage.php and (2) course/repo…Check if you run itEPSS 1.09%Jul 25, 2008
- Low2.6Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 2.39%Jul 25, 2008
- Medium6.0Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privile…Check if you run itEPSS 1.06%Jul 25, 2008
- Critical10.0Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execu…Check this weekEPSS 86.83%Jul 22, 2008
- Medium6.5CVE-2008-2622 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium4.0CVE-2008-2621 is listed by oracle.Check if you run itEPSS 1.32%Jul 15, 2008
- Medium6.5CVE-2008-2620 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2618 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2617 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2616 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2615 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- High7.5Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6…Check if you run itEPSS 3.09%Jul 15, 2008
- Medium4.3Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors.Check if you run itEPSS 0.38%Jul 15, 2008
- Medium4.6Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors.Check if you run itEPSS 2.11%Jul 15, 2008
Sort