Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows remote attackers to inject arb…Check if you run itEPSS 1.53%Jan 28, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.06%Jan 28, 2009
- Critical10.0The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execu…Check if you run itEPSS 3.31%Jan 22, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitra…Check if you run itEPSS 1.56%Jan 22, 2009
- High7.5Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hija…Check if you run itEPSS 1.79%Jan 22, 2009
- High7.5The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random s…Check if you run itEPSS 9.44%Jan 22, 2009
- High7.5SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a m…Check if you run itEPSS 1.86%Jan 22, 2009
- UnknownOpenOffice.org 1.1.2 through 1.1.5 Memory CorruptionPatch nowKEVEPSS 7.50%Jan 21, 2009
- Low2.1An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current login to a web site, which…Check if you run itEPSS 0.87%Jan 20, 2009
- High7.1Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the a…Check if you run itEPSS 1.67%Jan 15, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authe…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium4.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote…Check if you run itEPSS 0.90%Jan 14, 2009
- Medium5.5Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated u…Check if you run itEPSS 1.02%Jan 14, 2009
- Medium4.0Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to…Check if you run itEPSS 1.53%Jan 14, 2009
- Medium6.5Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authentic…Check if you run itEPSS 1.75%Jan 14, 2009
- Critical9.3CVE-2009-0070 is listed by apple.Check if you run itEPSS 2.86%Jan 8, 2009
- Medium5.8OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certif…Check if you run itEPSS 5.15%Jan 7, 2009
- Medium5.0Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and bro…Check if you run itEPSS 3.92%Jan 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.02%Dec 31, 2008
- High7.5SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 31, 2008
- High7.5SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 31, 2008
- High7.5SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comm…Check if you run itEPSS 1.06%Dec 31, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitr…Check if you run itEPSS 1.03%Dec 31, 2008
- Critical10.0Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack vectors, related to the (1) bankw…Check if you run itEPSS 1.54%Dec 31, 2008
Sort