Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6,…Check if you run itEPSS 1.06%Mar 5, 2009
- Medium5.0The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (ju…Check this weekEPSS 42.23%Mar 5, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the DR Wiki (dr_wiki) extension 1.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML…Check if you run itEPSS 0.84%Feb 27, 2009
- High7.5SQL injection vulnerability in the TU-Clausthal Staff (tuc_staff) 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via u…Check if you run itEPSS 1.00%Feb 27, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the TU-Clausthal ODIN (tuc_odin) extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remote attackers to inject arbit…Check if you run itEPSS 0.85%Feb 27, 2009
- Medium5.0Unspecified vulnerability in the TYPO3 Simple File Browser (simplefilebrowser) extension 1.0.2 and earlier allows remote attackers to obtain sensitive information via…Check if you run itEPSS 1.21%Feb 27, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the SB Universal Plugin (SBuniplug) extension 2.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web s…Check if you run itEPSS 0.85%Feb 27, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Vox populi (mv_vox_populi) extension 0.3.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.03%Feb 27, 2009
- High7.5SQL injection vulnerability in the WEBERkommunal Facilities (wes_facilities) extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unsp…Check if you run itEPSS 1.06%Feb 27, 2009
- Low2.6The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which…Check if you run itEPSS 4.17%Feb 26, 2009
- High8.8Microsoft Office Remote Code ExecutionPatch nowKEVEPSS 42.94%Feb 25, 2009
- Medium6.8The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause…Check if you run itEPSS 4.83%Feb 22, 2009
- High7.5CVE-2009-0653 is listed by inventory_critical.Check if you run itEPSS 1.15%Feb 20, 2009
- UnknownAdobe Acrobat and Reader Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 87.78%Feb 20, 2009
- High7.5Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary S…Check if you run itEPSS 1.06%Feb 16, 2009
- Medium4.3CVE-2008-6144 is listed by inventory_high.Check if you run itEPSS 1.03%Feb 16, 2009
- Medium6.5Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges vi…Check if you run itEPSS 1.50%Feb 13, 2009
- High7.5SQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the HotPot module in Moodle 1.6 before 1.6.7, 1.7 before 1.7.5, 1.8 before…Check if you run itEPSS 1.17%Feb 13, 2009
- Medium5.0Microsoft Exchange Server Improper Input ValidationPatch nowKEVEPSS 26.24%Feb 10, 2009
- Critical9.3Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties,…Check this weekEPSS 24.92%Feb 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9…Check if you run itEPSS 1.25%Feb 10, 2009
- Medium5.0Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "…Check if you run itEPSS 1.07%Feb 10, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers…Check if you run itEPSS 1.25%Feb 10, 2009
- Medium6.4Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete…Check if you run itEPSS 0.69%Feb 10, 2009
- Medium4.3Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http UR…Check if you run itEPSS 2.36%Jan 28, 2009
Sort