Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL co…Check if you run itEPSS 1.26%Apr 10, 2009
- High7.5SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL c…Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL comm…Check if you run itEPSS 1.10%Apr 10, 2009
- High7.5Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors.Check if you run itEPSS 1.36%Apr 10, 2009
- High7.5SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.05%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.03%Apr 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 1.26%Apr 10, 2009
- High7.5SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.Check if you run itEPSS 1.81%Apr 10, 2009
- Medium6.8Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows…Check if you run itEPSS 2.81%Apr 9, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script…Check if you run itEPSS 5.61%Apr 9, 2009
- Low2.6The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP clien…Check if you run itEPSS 7.26%Apr 9, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2…Check if you run itEPSS 7.91%Apr 9, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary we…Check if you run itEPSS 3.45%Apr 9, 2009
- Medium4.0Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users…Check if you run itEPSS 1.15%Apr 7, 2009
- Low2.6Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is…Check this weekEPSS 29.64%Apr 7, 2009
- High7.8Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory…Check if you run itEPSS 1.87%Apr 7, 2009
- High8.8Microsoft Office PowerPoint Code Injection VulnerabilityPatch nowKEVEPSS 67.31%Apr 3, 2009
- Medium4.3The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an inp…Check if you run itEPSS 6.24%Mar 30, 2009
- Medium5.0OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of ser…Check if you run itEPSS 2.59%Mar 27, 2009
- Low2.6The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allow…Check if you run itEPSS 2.83%Mar 27, 2009
- Medium5.0The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vecto…Check if you run itEPSS 6.71%Mar 27, 2009
- Medium6.8The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamic…Check if you run itEPSS 2.63%Mar 26, 2009
Sort