Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vec…Check if you run itEPSS 1.83%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.Check if you run itEPSS 3.02%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTM…Check if you run itEPSS 1.48%Mar 19, 2008
- Unknowngom_player gom_player Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 71.51%Mar 3, 2008
- Unknownaltdo convert_mp3_master Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 37.26%Mar 3, 2008
- UnknownAmerica Online SuperBuddy ActiveX Control Code ExecutionPatch nowKEVEPSS 8.50%Mar 3, 2008
- Medium6.8CVE-2008-0894 is listed by apple.Check if you run itEPSS 1.20%Feb 21, 2008
- High7.5Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host he…Check this weekEPSS 41.47%Feb 19, 2008
- High7.1CVE-2008-0729 is listed by apple.Check if you run itEPSS 8.07%Feb 12, 2008
- High7.8Adobe Acrobat and Reader Buffer Overflow VulnerabilityPatch nowKEVEPSS 87.31%Feb 12, 2008
- Medium5.8Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow rem…Check if you run itEPSS 5.02%Feb 12, 2008
- Medium4.3Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which a…Check if you run itEPSS 5.37%Feb 12, 2008
- Medium5.0CVE-2007-5333 is listed by inventory_critical.Check this weekEPSS 62.58%Feb 12, 2008
- High8.8Adobe Acrobat and Reader Unspecified VulnerabilityPatch nowKEVEPSS 37.87%Feb 7, 2008
- Unknownourgame.com glworld Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.30%Feb 7, 2008
- Low2.6CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and…Check this weekEPSS 19.04%Jan 25, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x…Check this weekEPSS 64.90%Jan 25, 2008
- Medium5.0The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an…Check this weekEPSS 19.62%Jan 23, 2008
- Medium4.3KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attrib…Check if you run itEPSS 3.26%Jan 16, 2008
- Medium6.8Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attac…Check if you run itEPSS 5.01%Jan 16, 2008
- Medium4.6Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode vi…Check if you run itEPSS 0.36%Jan 16, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 3.95%Jan 12, 2008
- Medium4.3mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduc…Check this weekEPSS 14.73%Jan 12, 2008
- High7.8Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corru…Check if you run itEPSS 3.90%Jan 12, 2008
- Medium4.3Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges v…Check if you run itEPSS 9.11%Jan 12, 2008
Sort