Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 27.09%Nov 10, 2009
- Critical9.8Apache HTTP Server Improper Certificate ValidationPatch nowKEVEPSS 87.26%Nov 9, 2009
- UnknownMicrosoft Active Template Library (ATL) COM Initialization VulnerabilityPatch nowKEVEPSS 37.76%Nov 4, 2009
- Medium5.0CVE-2009-3720 is listed by inventory_critical.Check this weekEPSS 27.92%Nov 3, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3be…Check if you run itEPSS 1.96%Nov 2, 2009
- Medium6.8The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access b…Check if you run itEPSS 2.06%Nov 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary…Check if you run itEPSS 1.96%Nov 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x b…Check if you run itEPSS 0.95%Nov 2, 2009
- Medium6.5SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x be…Check if you run itEPSS 1.61%Nov 2, 2009
- High8.5The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enab…Check if you run itEPSS 2.94%Nov 2, 2009
- Medium5.5The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place ar…Check if you run itEPSS 1.98%Nov 2, 2009
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before…Check if you run itEPSS 1.54%Nov 2, 2009
- Medium4.0The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determin…Check if you run itEPSS 1.13%Nov 2, 2009
- Medium6.9VMware Products Guest Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.75%Nov 2, 2009
- Medium5.0The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code…Check this weekEPSS 32.61%Oct 30, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via…Check if you run itEPSS 2.00%Oct 28, 2009
- High7.5SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.01%Oct 28, 2009
- Critical10.0Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via…Check if you run itEPSS 2.46%Oct 28, 2009
- Critical10.0Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.Check if you run itEPSS 1.24%Oct 28, 2009
- Medium4.3CVE-2009-3767 is listed by inventory_critical.Check if you run itEPSS 3.26%Oct 23, 2009
- Medium6.8mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 c…Check if you run itEPSS 1.15%Oct 23, 2009
- Medium6.8CVE-2009-3765 is listed by inventory_critical.Check if you run itEPSS 1.05%Oct 23, 2009
- Low3.6Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote aut…Check if you run itEPSS 1.65%Oct 22, 2009
- Low2.7Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to…Check if you run itEPSS 2.86%Oct 22, 2009
- Medium4.1Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to…Check if you run itEPSS 2.82%Oct 22, 2009
Sort