Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.6Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 2.39%Jul 25, 2008
- Medium6.0Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privile…Check if you run itEPSS 1.06%Jul 25, 2008
- Critical10.0Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execu…Check this weekEPSS 86.83%Jul 22, 2008
- Medium6.5CVE-2008-2622 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium4.0CVE-2008-2621 is listed by oracle.Check if you run itEPSS 1.32%Jul 15, 2008
- Medium6.5CVE-2008-2620 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2618 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2617 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2616 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- Medium6.5CVE-2008-2615 is listed by oracle.Check if you run itEPSS 1.57%Jul 15, 2008
- High7.5Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6…Check if you run itEPSS 3.09%Jul 15, 2008
- Medium4.3Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors.Check if you run itEPSS 0.38%Jul 15, 2008
- Medium4.6Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors.Check if you run itEPSS 2.11%Jul 15, 2008
- Medium4.4Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors.Check if you run itEPSS 0.41%Jul 15, 2008
- Medium5.0Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by rea…Check if you run itEPSS 1.18%Jul 14, 2008
- Medium6.8CVE-2008-3170 is listed by apple.Check if you run itEPSS 2.07%Jul 14, 2008
- Critical9.3CVE-2008-2317 is listed by apple.Check if you run itEPSS 7.70%Jul 14, 2008
- Critical10.0CVE-2008-2303 is listed by apple.Check this weekEPSS 12.99%Jul 14, 2008
- Medium6.8CVE-2008-1590 is listed by apple.Check if you run itEPSS 2.84%Jul 14, 2008
- Medium4.3Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2…Check if you run itEPSS 1.21%Jul 14, 2008
- Medium4.3Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL.Check if you run itEPSS 2.27%Jul 14, 2008
- Medium5.0Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service…Check if you run itEPSS 5.48%Jul 10, 2008
- UnknownMicrosoft Office Word 2002 SP3 Malformed Data Remote Code ExecutionPatch nowKEVEPSS 32.14%Jul 9, 2008
- Medium4.3CVE-2008-2248 is listed by inventory_critical.Check this weekEPSS 24.61%Jul 8, 2008
- Medium4.3CVE-2008-2247 is listed by inventory_critical.Check this weekEPSS 24.56%Jul 8, 2008
Sort