Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3CVE-2009-3767 is listed by inventory_critical.Check if you run itEPSS 3.26%Oct 23, 2009
- Medium6.8mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 c…Check if you run itEPSS 1.15%Oct 23, 2009
- Medium6.8CVE-2009-3765 is listed by inventory_critical.Check if you run itEPSS 1.05%Oct 23, 2009
- Low3.6Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote aut…Check if you run itEPSS 1.65%Oct 22, 2009
- Low2.7Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to…Check if you run itEPSS 2.86%Oct 22, 2009
- Medium4.1Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to…Check if you run itEPSS 2.82%Oct 22, 2009
- Medium4.0Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remot…Check if you run itEPSS 1.96%Oct 22, 2009
- UnknownMicrosoft Internet Information Services (IIS) Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 90.91%Oct 19, 2009
- Critical9.3Microsoft GDI+ PNG Integer OverflowPatch nowKEVEPSS 23.46%Oct 14, 2009
- Critical9.3GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a…Check this weekEPSS 20.45%Oct 14, 2009
- Critical9.3Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003…Check this weekEPSS 20.98%Oct 14, 2009
- Critical9.3GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, O…Check this weekEPSS 22.20%Oct 14, 2009
- High8.1Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office…Check this weekEPSS 22.02%Oct 14, 2009
- Critical9.3Microsoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 26.71%Oct 14, 2009
- Critical9.3Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office…Check this weekEPSS 23.65%Oct 14, 2009
- Medium5.0Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU con…Check if you run itEPSS 3.79%Oct 13, 2009
- Medium4.9Linux Kernel NULL Pointer DereferencePatch nowKEVEPSS 1.24%Oct 13, 2009
- High7.5The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server…Check this weekEPSS 14.17%Oct 13, 2009
- High8.8Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 86.53%Oct 13, 2009
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or…Check if you run itEPSS 1.25%Sep 30, 2009
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or…Check if you run itEPSS 1.25%Sep 30, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML vi…Check if you run itEPSS 1.45%Sep 30, 2009
- High7.5iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-m…Check if you run itEPSS 0.93%Sep 21, 2009
- Medium4.3Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.Check if you run itEPSS 4.21%Sep 21, 2009
- High7.8The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (N…Check if you run itEPSS 2.47%Sep 10, 2009
Sort