Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored i…Check if you run itEPSS 3.05%Sep 14, 2006
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified par…Check if you run itEPSS 1.21%Sep 14, 2006
- Critical9.1OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attaCheck if you run itEPSS 3.95%Sep 5, 2006
- Unknownsendmail sendmail Use After FreePatch nowKEVEPSS 4.55%Aug 29, 2006
- Unknownjustsystem formliner Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.56%Aug 22, 2006
- Medium6.5MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which…Check this weekEPSS 13.57%Aug 18, 2006
- Low3.6MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database…Check if you run itEPSS 3.07%Aug 18, 2006
- High7.5CVE-2006-4112 is listed by inventory_high.Check if you run itEPSS 3.12%Aug 14, 2006
- High7.5CVE-2006-4111 is listed by inventory_high.Check if you run itEPSS 2.33%Aug 14, 2006
- Medium4.3Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters…Check this weekEPSS 39.97%Aug 14, 2006
- Low2.1MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revo…Check if you run itEPSS 1.74%Aug 9, 2006
- UnknownMicrosoft visual_basic Out-of-bounds WritePatch nowKEVEPSS 10.17%Aug 8, 2006
- UnknownMicrosoft PowerPoint Mso.dll VulnerabilityPatch nowKEVEPSS 14.26%Aug 8, 2006
- High7.5WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted H…Check if you run itEPSS 5.30%Jul 31, 2006
- High7.6Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when Rewr…Check this weekEPSS 97.13%Jul 28, 2006
- Medium4.3http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.…Check this weekEPSS 95.14%Jul 28, 2006
- Medium5.0Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs end…Check this weekEPSS 48.05%Jul 25, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknow…Check if you run itEPSS 4.07%Jul 21, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact…Check if you run itEPSS 4.07%Jul 21, 2006
- Medium4.0Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (cr…Check this weekEPSS 31.06%Jul 21, 2006
- Medium5.0Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet memory consumption and cra…Check if you run itEPSS 4.32%Jul 12, 2006
- UnknownMicrosoft Excel Malformed file VulnerabilityPatch nowKEVEPSS 41.11%Jul 11, 2006
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 28.63%Jul 11, 2006
- UnknownMicrosoft Excel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 9.79%Jul 11, 2006
- Low2.1Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 befo…Check if you run itEPSS 0.65%Jul 10, 2006
Sort