Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Refe…Check if you run itEPSS 3.87%Sep 10, 2009
- Low2.1The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo de…Check if you run itEPSS 0.36%Sep 10, 2009
- High7.2Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the pa…Check if you run itEPSS 0.37%Sep 10, 2009
- Medium4.6The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock"…Check if you run itEPSS 0.26%Sep 10, 2009
- Low2.1The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might all…Check if you run itEPSS 0.34%Sep 10, 2009
- Medium6.8Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, al…Check if you run itEPSS 4.63%Sep 10, 2009
- Medium5.0The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vect…Check this weekEPSS 13.55%Sep 8, 2009
- Low2.6The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cau…Check if you run itEPSS 8.57%Sep 8, 2009
- UnknownUUSee UUUpgrade ActiveX control Remote File ManipulationPatch nowKEVEPSS 5.65%Sep 8, 2009
- High7.8Linux Kernel NULL Pointer DereferencePatch nowKEVEPSS 7.12%Aug 27, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server (Java) 7.0 allows remote attackers to inject arbi…Check if you run itEPSS 2.06%Aug 21, 2009
- Medium5.9Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityPatch nowKEVEPSS 3.31%Aug 19, 2009
- Medium6.4MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request.Check if you run itEPSS 9.18%Aug 19, 2009
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 24.66%Aug 18, 2009
- High7.8Linux Kernel Use of Uninitialized ResourcePatch nowKEVEPSS 14.63%Aug 14, 2009
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 51.32%Aug 13, 2009
- Medium5.8Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms,…Check if you run itEPSS 2.59%Aug 12, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.Check if you run itEPSS 1.03%Aug 11, 2009
- Medium4.3Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified re…Check if you run itEPSS 1.09%Aug 11, 2009
- Medium6.5Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial o…Check if you run itEPSS 1.96%Aug 11, 2009
- UnknownSPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 Installation and Backup Unauthorized Activity VulnerabilityPatch nowKEVEPSS 6.59%Aug 6, 2009
- Critical10.0Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or…Check if you run itEPSS 8.24%Aug 3, 2009
- Medium5.1The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support…Check if you run itEPSS 4.27%Jul 30, 2009
- UnknownISC BIND dns_db_findrdataset Function Denial of ServicePatch nowKEVEPSS 12.65%Jul 29, 2009
- High7.8Adobe Acrobat and Reader, Flash Player Unspecified VulnerabilityPatch nowKEVEPSS 21.20%Jul 23, 2009
Sort