Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query…Check this weekEPSS 18.68%Jun 16, 2009
- UnknownAMaViS, SpamAssassin Compress::Raw::Zlib Perl Module Denial of ServicePatch nowKEVEPSS 7.44%Jun 16, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remot…Check if you run itEPSS 2.68%Jun 10, 2009
- Critical9.3Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 t…Check if you run itEPSS 7.75%Jun 10, 2009
- Medium4.3The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redi…Check if you run itEPSS 2.62%Jun 10, 2009
- High7.5The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly h…Check this weekEPSS 29.10%Jun 10, 2009
- Critical9.3WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Casca…Check if you run itEPSS 8.46%Jun 10, 2009
- Critical9.3Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.…Check if you run itEPSS 6.62%Jun 10, 2009
- High7.8Microsoft Windows Improper Input Validation VulnerabilityPatch nowKEVEPSS 4.88%Jun 10, 2009
- High7.8Microsoft Office Object Record Corruption VulnerabilityPatch nowKEVEPSS 52.84%Jun 10, 2009
- High7.8Microsoft Office Buffer Overflow VulnerabilityPatch nowKEVEPSS 59.63%Jun 10, 2009
- Medium6.8Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims v…Check if you run itEPSS 0.58%Jun 8, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the (1)…Check if you run itEPSS 1.26%Jun 8, 2009
- Medium6.4Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or…Check this weekEPSS 12.04%Jun 8, 2009
- High7.5CVE-2009-1955 is listed by inventory_critical.Check this weekEPSS 52.99%Jun 8, 2009
- Medium4.3The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via…Check if you run itEPSS 8.53%Jun 8, 2009
- Medium4.2Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, w…Check if you run itEPSS 0.81%Jun 5, 2009
- Medium4.3Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid userna…Check this weekEPSS 94.44%Jun 5, 2009
- Medium5.0Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attac…Check this weekEPSS 10.05%Jun 5, 2009
- Medium5.0The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer derefe…Check this weekEPSS 10.25%Jun 4, 2009
- Medium5.0ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec pack…Check this weekEPSS 80.13%Jun 4, 2009
- Critical9.3The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote…Check if you run itEPSS 3.54%May 29, 2009
- High8.8Microsoft DirectX NULL Byte Overwrite VulnerabilityPatch nowKEVEPSS 51.08%May 29, 2009
- Medium4.9The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain…Check if you run itEPSS 1.96%May 28, 2009
- UnknownBaofeng products 3.09.04.17 and earlier Config.dll Remote Code ExecutionPatch nowKEVEPSS 7.53%May 28, 2009
Sort