Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.06%Apr 10, 2009
- High7.5Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.Check if you run itEPSS 1.81%Apr 10, 2009
- Medium6.8Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows…Check if you run itEPSS 2.81%Apr 9, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script…Check if you run itEPSS 5.61%Apr 9, 2009
- Low2.6The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP clien…Check if you run itEPSS 7.26%Apr 9, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2…Check if you run itEPSS 7.91%Apr 9, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary we…Check if you run itEPSS 3.45%Apr 9, 2009
- Medium4.0Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users…Check if you run itEPSS 1.15%Apr 7, 2009
- Low2.6Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is…Check this weekEPSS 29.64%Apr 7, 2009
- High7.8Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory…Check if you run itEPSS 1.87%Apr 7, 2009
- High8.8Microsoft Office PowerPoint Code Injection VulnerabilityPatch nowKEVEPSS 67.31%Apr 3, 2009
- Medium4.3The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an inp…Check if you run itEPSS 6.24%Mar 30, 2009
- Medium5.0OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of ser…Check if you run itEPSS 2.59%Mar 27, 2009
- Low2.6The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allow…Check if you run itEPSS 2.83%Mar 27, 2009
- Medium5.0The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vecto…Check if you run itEPSS 6.71%Mar 27, 2009
- Medium6.8The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamic…Check if you run itEPSS 2.63%Mar 26, 2009
- Critical9.8phpMyAdmin Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.56%Mar 26, 2009
- Medium4.9nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device n…Check if you run itEPSS 0.43%Mar 25, 2009
- UnknownJustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier Remote Code ExecutionPatch nowKEVEPSS 3.91%Mar 24, 2009
- Medium5.0Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (…Check this weekEPSS 72.71%Mar 23, 2009
- Medium5.0ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound…Check this weekEPSS 38.58%Mar 23, 2009
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/…Check if you run itEPSS 1.52%Mar 20, 2009
- High7.5SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter.Check if you run itEPSS 1.69%Mar 20, 2009
- UnknownApple quicktime Out-of-bounds WritePatch nowKEVEPSS 48.79%Mar 20, 2009
- Unknownwinzip winzip Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.69%Mar 20, 2009
Sort