Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated s…Check if you run itEPSS 1.38%Dec 16, 2009
- Medium5.0Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached…Check if you run itEPSS 2.22%Dec 16, 2009
- Medium5.0mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to…Check if you run itEPSS 2.10%Dec 16, 2009
- Medium5.0The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, whi…Check if you run itEPSS 1.61%Dec 16, 2009
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unsp…Check if you run itEPSS 1.22%Dec 16, 2009
- High7.8Adobe Acrobat and Reader Use-After-Free VulnerabilityPatch nowKEVEPSS 81.88%Dec 14, 2009
- Medium5.0CVE-2009-3560 is listed by inventory_critical.Check this weekEPSS 24.31%Dec 4, 2009
- Medium6.4Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct "Cache spoofing" attacks via…Check if you run itEPSS 1.08%Dec 2, 2009
- High7.5SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.00%Dec 2, 2009
- High7.5SQL injection vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via…Check if you run itEPSS 1.01%Dec 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web s…Check if you run itEPSS 0.85%Dec 2, 2009
- High7.5SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands…Check if you run itEPSS 1.01%Dec 2, 2009
- High7.2Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors.Check if you run itEPSS 0.35%Dec 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 0.84%Dec 2, 2009
- Medium5.0Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to ob…Check if you run itEPSS 1.21%Dec 2, 2009
- Low3.5Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for…Check if you run itEPSS 0.84%Dec 2, 2009
- High7.5SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Dec 2, 2009
- Medium4.4CVE-2009-4030 is listed by oracle.Check if you run itEPSS 0.43%Nov 30, 2009
- Medium6.8The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth…Check if you run itEPSS 1.77%Nov 30, 2009
- Medium4.0mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does…Check this weekEPSS 16.26%Nov 30, 2009
- Medium6.0sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesy…Check if you run itEPSS 1.77%Nov 30, 2009
- UnknownHeap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of serviceCheck if you run itEPSS 5.17%Nov 20, 2009
- Medium6.8The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom…Check if you run itEPSS 1.55%Nov 13, 2009
- High7.5The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative…Check this weekEPSS 79.00%Nov 12, 2009
- High7.8Microsoft Excel Featheader Record Memory Corruption VulnerabilityPatch nowKEVEPSS 84.03%Nov 11, 2009
Sort