Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WM…Check this weekEPSS 34.54%Jul 8, 2008
- Critical9.0Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a craft…Check this weekEPSS 35.32%Jul 8, 2008
- Critical9.0Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authentica…Check this weekEPSS 61.93%Jul 8, 2008
- Medium5.0SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data…Check this weekEPSS 10.68%Jul 8, 2008
- UnknownAdobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2 Input Validation in a JavaScript Method VulnerabilityPatch nowKEVEPSS 23.85%Jun 25, 2008
- Critical9.3Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote…Check if you run itEPSS 7.33%Jun 23, 2008
- Critical9.3Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to…Check if you run itEPSS 3.81%Jun 23, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in fe_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, as used in extensions such as (1)…Check if you run itEPSS 1.81%Jun 16, 2008
- Medium6.5TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attack…Check if you run itEPSS 3.02%Jun 16, 2008
- Medium5.0The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forward…Check this weekEPSS 12.71%Jun 13, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML…Check if you run itEPSS 9.78%Jun 4, 2008
- Critical9.3CVE-2008-2540 is listed by apple.Check if you run itEPSS 8.31%Jun 3, 2008
- Medium4.3CVE-2008-1580 is listed by apple.Check if you run itEPSS 1.30%Jun 2, 2008
- Medium4.3OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particu…Check if you run itEPSS 5.00%May 29, 2008
- Medium4.3Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) v…Check if you run itEPSS 4.38%May 29, 2008
- UnknownAdobe Flash Player SWF Negative Scene Count VulnerabilityPatch nowKEVEPSS 92.50%May 28, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not…Check this weekEPSS 54.85%May 13, 2008
- High7.5OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it eas…Check this weekEPSS 70.72%May 13, 2008
- UnknownMicrosoft jet Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 28.27%May 13, 2008
- Medium4.6MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TAB…Check if you run itEPSS 2.59%May 5, 2008
- Medium4.3Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that triggers an out-of-bounds access, possibly due…Check if you run itEPSS 1.94%Apr 28, 2008
- Medium4.3Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write…Check if you run itEPSS 1.31%Apr 28, 2008
- Medium5.0Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of t…Check if you run itEPSS 1.41%Apr 28, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture So…Check if you run itEPSS 8.02%Apr 18, 2008
- Medium6.8Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attacker…Check if you run itEPSS 4.75%Apr 17, 2008
Sort