Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft isa_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 62.02%Jul 15, 2009
- Medium5.5Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundl…Check if you run itEPSS 1.48%Jul 14, 2009
- Medium4.0Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle…Check if you run itEPSS 1.20%Jul 14, 2009
- Medium5.0Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 a…Check if you run itEPSS 1.51%Jul 14, 2009
- High8.5Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated us…Check this weekEPSS 10.59%Jul 13, 2009
- High7.1The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows…Check this weekEPSS 17.11%Jul 10, 2009
- Critical9.3WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (ak…Check if you run itEPSS 6.19%Jul 9, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other plat…Check if you run itEPSS 6.21%Jul 9, 2009
- High8.8Microsoft Windows Video ActiveX Control Remote Code Execution VulnerabilityPatch nowKEVEPSS 76.58%Jul 7, 2009
- High7.1The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properl…Check this weekEPSS 16.16%Jul 5, 2009
- Unknownfckeditor fckeditor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 83.86%Jul 5, 2009
- Medium5.0The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP…Check if you run itEPSS 4.25%Jul 2, 2009
- High7.1WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to…Check if you run itEPSS 4.24%Jun 19, 2009
- High7.8The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (devic…Check if you run itEPSS 2.80%Jun 19, 2009
- Low2.1Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Setti…Check if you run itEPSS 0.38%Jun 19, 2009
- Low2.1The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the pa…Check if you run itEPSS 0.36%Jun 19, 2009
- Medium5.0The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, w…Check if you run itEPSS 6.38%Jun 19, 2009
- Medium4.3The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HT…Check if you run itEPSS 1.89%Jun 19, 2009
- High7.1The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device…Check if you run itEPSS 2.51%Jun 19, 2009
- Medium4.3Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server…Check if you run itEPSS 0.94%Jun 19, 2009
- High7.5SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via…Check if you run itEPSS 1.10%Jun 17, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to in…Check if you run itEPSS 1.06%Jun 17, 2009
- High7.5SQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands v…Check if you run itEPSS 1.10%Jun 17, 2009
- UnknownWordPad and Office Text Converter Memory Corruption VulnerabilityPatch nowKEVEPSS 25.89%Jun 17, 2009
- Medium6.8Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted…Check if you run itEPSS 1.67%Jun 16, 2009
Sort