Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via par…Check this weekEPSS 83.80%Apr 24, 2007
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrat…Check if you run itEPSS 1.08%Apr 22, 2007
- Critical10.0Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.Check if you run itEPSS 2.24%Apr 18, 2007
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.Check if you run itEPSS 3.02%Apr 18, 2007
- Medium4.4suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- Low3.7suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local u…Check if you run itEPSS 0.69%Apr 13, 2007
- Medium6.2Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and…Check if you run itEPSS 0.52%Apr 13, 2007
- Unknownphpwiki phpwiki Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.28%Apr 12, 2007
- Medium5.0The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows…Check if you run itEPSS 2.63%Apr 10, 2007
- Critical10.0Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspe…Check if you run itEPSS 6.71%Apr 10, 2007
- Critical10.0Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 6.71%Apr 10, 2007
- High7.5Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors.Check if you run itEPSS 4.41%Apr 10, 2007
- Medium5.0CVE-2007-1913 is listed by apple.Check if you run itEPSS 2.30%Apr 10, 2007
- Unknownichitaro ichitaro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.50%Apr 10, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 73.15%Apr 3, 2007
- UnknownMicrosoft Windows Cursor, Animated Cursor, and Icon Processing VulnerabilityPatch nowKEVEPSS 54.85%Mar 30, 2007
- High7.8Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attacke…Check if you run itEPSS 3.51%Mar 24, 2007
- Medium5.0Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, m…Check this weekEPSS 91.16%Mar 16, 2007
- High7.5Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utf…Check if you run itEPSS 1.41%Mar 13, 2007
- Low2.1MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a…Check if you run itEPSS 1.03%Mar 12, 2007
- UnknownMutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing between signed and unsigned portions ofCheck if you run itEPSS 2.83%Mar 6, 2007
- UnknownMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into savingCheck if you run itEPSS 1.51%Feb 23, 2007
- High7.5The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors.Check if you run itEPSS 1.44%Feb 22, 2007
- UnknownClam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumpCheck if you run itEPSS 3.50%Feb 16, 2007
Sort