Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownchinagames igame Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 10.90%May 28, 2009
- Medium5.0Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of ser…Check this weekEPSS 18.24%May 19, 2009
- Medium5.0Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a…Check this weekEPSS 12.75%May 19, 2009
- Medium5.0The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption)…Check this weekEPSS 11.27%May 19, 2009
- Medium5.0Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a ..Check if you run itEPSS 6.44%May 12, 2009
- Unknownbaofeng storm Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 33.26%May 11, 2009
- High7.8Cisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%May 6, 2009
- Critical9.3McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- h…Check if you run itEPSS 2.82%May 5, 2009
- Unknownpjhome puterjams_blog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.17%Apr 29, 2009
- UnknownMultiple Products libmodplug MED File VulnerabilityPatch nowKEVEPSS 4.67%Apr 27, 2009
- Medium5.0mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent…Check this weekEPSS 12.38%Apr 23, 2009
- UnknownMozilla Firefox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.29%Apr 22, 2009
- High7.5Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1)…Check if you run itEPSS 8.54%Apr 17, 2009
- Medium5.8CVE-2009-1014 is listed by oracle.Check if you run itEPSS 1.79%Apr 15, 2009
- Medium6.4CVE-2009-1013 is listed by oracle.Check if you run itEPSS 2.24%Apr 15, 2009
- Medium5.5Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows…Check if you run itEPSS 1.26%Apr 15, 2009
- Medium4.0Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote authent…Check if you run itEPSS 1.44%Apr 15, 2009
- UnknownMicrosoft Windows Improper Privilege ManagementPatch nowKEVEPSS 2.36%Apr 14, 2009
- UnknownWindows RPCSS Service Isolation VulnerabilityPatch nowKEVEPSS 4.06%Apr 14, 2009
- UnknownWindows WMI Service Isolation VulnerabilityPatch nowKEVEPSS 2.74%Apr 14, 2009
- UnknownMicrosoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 Privilege EscalationPatch nowKEVEPSS 36.83%Apr 14, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.03%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 1.03%Apr 10, 2009
- High7.5SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via un…Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.10%Apr 10, 2009
Sort