Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an inp…Check if you run itEPSS 6.24%Mar 30, 2009
- Medium5.0OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of ser…Check if you run itEPSS 2.59%Mar 27, 2009
- Low2.6The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allow…Check if you run itEPSS 2.83%Mar 27, 2009
- Medium5.0The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vecto…Check if you run itEPSS 6.71%Mar 27, 2009
- Medium6.8The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamic…Check if you run itEPSS 2.63%Mar 26, 2009
- Critical9.8phpMyAdmin Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.56%Mar 26, 2009
- Medium4.9nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device n…Check if you run itEPSS 0.43%Mar 25, 2009
- UnknownJustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier Remote Code ExecutionPatch nowKEVEPSS 3.91%Mar 24, 2009
- Medium5.0Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (…Check this weekEPSS 72.71%Mar 23, 2009
- Medium5.0ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound…Check this weekEPSS 38.58%Mar 23, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/…Check if you run itEPSS 1.52%Mar 20, 2009
- High7.5SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter.Check if you run itEPSS 1.69%Mar 20, 2009
- UnknownApple quicktime Out-of-bounds WritePatch nowKEVEPSS 48.79%Mar 20, 2009
- Unknownwinzip winzip Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.69%Mar 20, 2009
- High8.8Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 96.63%Mar 19, 2009
- High7.5SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension fo…Check if you run itEPSS 1.05%Mar 13, 2009
- High7.5SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Mar 13, 2009
- High7.5SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Mar 13, 2009
- High7.5SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL com…Check if you run itEPSS 1.06%Mar 13, 2009
- High7.5SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comman…Check if you run itEPSS 1.06%Mar 13, 2009
- High7.5SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute a…Check if you run itEPSS 1.06%Mar 13, 2009
- High7.5SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspe…Check if you run itEPSS 1.06%Mar 13, 2009
- High7.5SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Mar 13, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 t…Check if you run itEPSS 9.72%Mar 9, 2009
- Medium4.0sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression em…Check this weekEPSS 10.18%Mar 5, 2009
Sort