Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Office Object Record Corruption VulnerabilityPatch nowKEVEPSS 52.84%Jun 10, 2009
- High7.8Microsoft Office Buffer Overflow VulnerabilityPatch nowKEVEPSS 59.63%Jun 10, 2009
- Medium6.8Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims v…Check if you run itEPSS 0.58%Jun 8, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the (1)…Check if you run itEPSS 1.26%Jun 8, 2009
- Medium6.4Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or…Check this weekEPSS 12.04%Jun 8, 2009
- High7.5CVE-2009-1955 is listed by inventory_critical.Check this weekEPSS 52.99%Jun 8, 2009
- Medium4.3The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via…Check if you run itEPSS 8.53%Jun 8, 2009
- Medium4.2Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, w…Check if you run itEPSS 0.81%Jun 5, 2009
- Medium4.3Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid userna…Check this weekEPSS 94.44%Jun 5, 2009
- Medium5.0Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attac…Check this weekEPSS 10.05%Jun 5, 2009
- Medium5.0The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer derefe…Check this weekEPSS 10.25%Jun 4, 2009
- Medium5.0ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec pack…Check this weekEPSS 80.13%Jun 4, 2009
- Critical9.3The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote…Check if you run itEPSS 3.54%May 29, 2009
- High8.8Microsoft DirectX NULL Byte Overwrite VulnerabilityPatch nowKEVEPSS 51.08%May 29, 2009
- Medium4.9The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain…Check if you run itEPSS 1.96%May 28, 2009
- UnknownBaofeng products 3.09.04.17 and earlier Config.dll Remote Code ExecutionPatch nowKEVEPSS 7.53%May 28, 2009
- Unknownchinagames igame Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 10.90%May 28, 2009
- Medium5.0Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of ser…Check this weekEPSS 18.24%May 19, 2009
- Medium5.0Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a…Check this weekEPSS 12.75%May 19, 2009
- Medium5.0The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption)…Check this weekEPSS 11.27%May 19, 2009
- Medium5.0Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a ..Check if you run itEPSS 6.44%May 12, 2009
- Unknownbaofeng storm Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 33.26%May 11, 2009
- High7.8Cisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.82%May 6, 2009
- Critical9.3McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- h…Check if you run itEPSS 2.82%May 5, 2009
- Unknownpjhome puterjams_blog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.17%Apr 29, 2009
Sort