Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0…Check if you run itEPSS 7.08%Sep 16, 2008
- High7.6Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to…Check this weekEPSS 18.41%Sep 16, 2008
- Critical10.0Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service…Check this weekEPSS 23.37%Sep 12, 2008
- Medium4.0MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, w…Check if you run itEPSS 6.46%Sep 11, 2008
- Critical9.3Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause…Check if you run itEPSS 5.95%Sep 11, 2008
- Critical9.8The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attack…Check if you run itEPSS 3.52%Sep 11, 2008
- Critical9.3Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint View…Check this weekEPSS 39.27%Sep 11, 2008
- Critical9.3Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office X…Check this weekEPSS 36.72%Sep 11, 2008
- Critical9.3gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003…Check this weekEPSS 52.06%Sep 11, 2008
- Critical9.3gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003…Check this weekEPSS 31.04%Sep 11, 2008
- Critical9.3Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office…Check this weekEPSS 52.89%Sep 11, 2008
- Medium5.8The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, whic…Check if you run itEPSS 0.92%Sep 4, 2008
- Unknownjustsystems ichitaro Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.91%Sep 4, 2008
- UnknownAdobe Flash Player 9.0.124.0 and earlier System.setClipboard method in ActionScript VulnerabilityPatch nowKEVEPSS 16.97%Aug 29, 2008
- Medium6.5libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial…Check if you run itEPSS 2.51%Aug 27, 2008
- UnknownOpenBSD openssh Improper Input ValidationPatch nowKEVEPSS 2.37%Aug 22, 2008
- UnknownMicrosoft visual_basic Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 55.92%Aug 18, 2008
- UnknownJoomla! components/com_user/models/reset.php First Enabled User VulnerabilityPatch nowKEVEPSS 9.47%Aug 15, 2008
- Medium4.3CVE-2008-2938 is listed by inventory_critical.Check this weekEPSS 99.71%Aug 13, 2008
- Critical9.3Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pa…Check this weekEPSS 35.65%Aug 12, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Ap…Check this weekEPSS 38.95%Aug 6, 2008
- High8.8Oracle VirtualBox Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 6.88%Aug 5, 2008
- Medium5.0Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the q…Check this weekEPSS 52.72%Aug 4, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitr…Check this weekEPSS 75.87%Aug 4, 2008
- Medium4.3Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct request to (1) blog/blogpage.php and (2) course/repo…Check if you run itEPSS 1.09%Jul 25, 2008
Sort