Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbi…Check if you run itEPSS 1.05%Dec 17, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.Check if you run itEPSS 1.09%Dec 17, 2008
- High7.5SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Dec 17, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary w…Check if you run itEPSS 1.55%Dec 11, 2008
- UnknownMicrosoft Internet Explorer CRecordInstance::TransferToDestination Remote Code ExecutionPatch nowKEVEPSS 66.51%Dec 11, 2008
- Critical9.0Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and…Check this weekEPSS 87.04%Dec 10, 2008
- UnknownWordPad Word 97 Text Converter Stack Overflow VulnerabilityPatch nowKEVEPSS 43.03%Dec 10, 2008
- Low2.6Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new appl…Check if you run itEPSS 2.15%Nov 25, 2008
- Medium5.0Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, w…Check if you run itEPSS 2.16%Nov 25, 2008
- Critical9.3Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to e…Check if you run itEPSS 5.85%Nov 25, 2008
- Low1.9CVE-2008-4230 is listed by apple.Check if you run itEPSS 0.35%Nov 25, 2008
- Low3.7Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to re…Check if you run itEPSS 0.24%Nov 25, 2008
- Low3.6The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergen…Check if you run itEPSS 0.36%Nov 25, 2008
- High7.5Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously…Check if you run itEPSS 1.64%Nov 25, 2008
- High7.1ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and dev…Check if you run itEPSS 2.53%Nov 25, 2008
- Unknownphpcow phpcow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.69%Nov 25, 2008
- Medium6.9spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-…Check if you run itEPSS 0.39%Nov 18, 2008
- Medium4.3The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive infor…Check if you run itEPSS 8.60%Nov 17, 2008
- Low1.9Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive in…Check if you run itEPSS 0.32%Nov 17, 2008
- Critical9.3Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 all…Check if you run itEPSS 8.34%Nov 17, 2008
- Medium5.0Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors.Check if you run itEPSS 1.21%Nov 14, 2008
- High7.5SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via un…Check if you run itEPSS 1.00%Nov 14, 2008
- Medium4.3Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows r…Check this weekEPSS 27.75%Nov 12, 2008
- Low3.5Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allo…Check if you run itEPSS 9.38%Nov 10, 2008
- High7.8Adobe Reader and Acrobat Input Validation VulnerabilityPatch nowKEVEPSS 99.79%Nov 4, 2008
Sort