Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown imp…Check if you run itEPSS 2.87%Oct 18, 2006
- Medium6.8Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are…Check this weekEPSS 16.42%Oct 16, 2006
- Medium5.1SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter.Check if you run itEPSS 2.24%Oct 10, 2006
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 13.21%Oct 10, 2006
- UnknownMicrosoft Word Malformed Stack VulnerabilityPatch nowKEVEPSS 34.49%Oct 10, 2006
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 63.57%Oct 10, 2006
- Medium4.3The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denia…Check this weekEPSS 19.41%Sep 28, 2006
- Critical10.0Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote atta…Check this weekEPSS 49.91%Sep 28, 2006
- High7.8OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with l…Check if you run itEPSS 5.10%Sep 28, 2006
- High7.8OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 str…Check this weekEPSS 11.04%Sep 28, 2006
- Low2.6Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers…Check if you run itEPSS 1.37%Sep 28, 2006
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 61.44%Sep 26, 2006
- Medium5.0course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers…Check if you run itEPSS 1.25%Sep 23, 2006
- Medium4.6Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top l…Check if you run itEPSS 0.89%Sep 23, 2006
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose param…Check if you run itEPSS 1.00%Sep 23, 2006
- Medium5.0login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action.Check if you run itEPSS 1.25%Sep 23, 2006
- Medium5.0backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to o…Check if you run itEPSS 1.05%Sep 23, 2006
- Medium4.0help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the pa…Check if you run itEPSS 1.00%Sep 23, 2006
- Medium4.0lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote…Check if you run itEPSS 1.00%Sep 23, 2006
- Critical10.0Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.Check if you run itEPSS 1.51%Sep 23, 2006
- Critical10.0The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.Check if you run itEPSS 1.49%Sep 23, 2006
- High7.5codeworx_technologies dcp-portal Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.86%Sep 15, 2006
- Medium5.0Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.Check if you run itEPSS 1.42%Sep 14, 2006
- High7.5SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored i…Check if you run itEPSS 3.05%Sep 14, 2006
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified par…Check if you run itEPSS 1.21%Sep 14, 2006
Sort