Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the Proces…Check this weekEPSS 91.60%Jan 10, 2008
- Low3.5Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbi…Check if you run itEPSS 8.32%Jan 8, 2008
- Medium4.0The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authe…Check if you run itEPSS 9.95%Jan 8, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-…Check this weekEPSS 75.89%Jan 8, 2008
- Medium5.0mortbay_jetty jetty Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.97%Jan 8, 2008
- High7.5The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to…Check if you run itEPSS 1.36%Jan 3, 2008
- Medium5.0JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID.Check if you run itEPSS 1.19%Jan 3, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary web script or HTML, which…Check if you run itEPSS 1.22%Jan 3, 2008
- Medium4.3Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all doma…Check if you run itEPSS 0.65%Dec 28, 2007
- High7.5SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter.Check if you run itEPSS 3.84%Dec 27, 2007
- Medium6.4The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web…Check if you run itEPSS 5.16%Dec 27, 2007
- Medium4.3Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as so…Check this weekEPSS 38.04%Dec 21, 2007
- UnknownMicrosoft Internet Explorer 5.01 through 7 DHTML Object Memory Corruption VulnerabilityPatch nowKEVEPSS 28.03%Dec 20, 2007
- Critical9.3Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary c…Check if you run itEPSS 5.59%Dec 19, 2007
- Medium4.3WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of…Check if you run itEPSS 3.10%Dec 19, 2007
- Unknownjustsystem ichitaro Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.09%Dec 18, 2007
- Medium6.5SQL injection vulnerability in the indexed_search system extension in TYPO3 3.x, 4.0 through 4.0.7, and 4.1 through 4.1.3 allows remote authenticated users to execute…Check if you run itEPSS 1.33%Dec 15, 2007
- High7.8Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service (crash) via malformed BGP packets, possibly BGP UPDATE…Check if you run itEPSS 3.74%Dec 15, 2007
- Medium4.3Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap m…Check this weekEPSS 46.60%Dec 13, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.90%Dec 11, 2007
- Medium5.0The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL…Check if you run itEPSS 2.96%Dec 10, 2007
- Low3.5MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authe…Check if you run itEPSS 2.23%Dec 10, 2007
- Medium5.8MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of tabl…Check if you run itEPSS 2.13%Dec 10, 2007
- Critical9.3The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown…Check if you run itEPSS 3.28%Dec 6, 2007
- Medium4.3CVE-2007-6203 is listed by inventory_critical.Check this weekEPSS 80.75%Dec 3, 2007
Sort