Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmambo mambo_site_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.88%Nov 22, 2005
- Low2.6jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.Check if you run itEPSS 3.06%Nov 17, 2005
- High7.5Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id pa…Check if you run itEPSS 2.50%Nov 17, 2005
- Medium5.0Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web director…Check if you run itEPSS 5.95%Nov 6, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE04.Check if you run itEPSS 3.77%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE03.Check if you run itEPSS 5.14%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02.Check if you run itEPSS 3.77%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE01.Check if you run itEPSS 2.96%Nov 2, 2005
- Medium5.0Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they ca…Check if you run itEPSS 1.09%Oct 26, 2005
- Medium5.0Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted…Check this weekEPSS 14.19%Oct 25, 2005
- High7.3Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an evalCheck if you run itEPSS 3.88%Oct 24, 2005
- Medium5.0The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification…Check if you run itEPSS 4.87%Oct 18, 2005
- Critical9.8Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian charaCheck this weekEPSS 23.26%Oct 17, 2005
- High7.5Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when…Check this weekEPSS 43.45%Oct 13, 2005
- Unknownati catalyst_driver Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 63.25%Oct 11, 2005
- Low2.6The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly han…Check if you run itEPSS 6.52%Oct 6, 2005
- Medium5.0Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.Check if you run itEPSS 3.00%Sep 21, 2005
- High7.5The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attacCheck if you run itEPSS 0.84%Sep 16, 2005
- Critical10.0ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClien…Check this weekEPSS 30.58%Sep 6, 2005
- Critical9.8HP OpenView Network Node Manager Remote Code Execution VulnerabilityPatch nowKEVEPSS 74.59%Sep 2, 2005
- Medium5.0The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.Check this weekEPSS 10.98%Aug 30, 2005
- UnknownMicrosoft Internet Explorer HTML E-mail Feature VulnerabilityPatch nowKEVEPSS 11.21%Aug 25, 2005
- UnknownMicrosoft IIS 4.0 and 5.0 Folder Traversal VulnerabilityPatch nowKEVEPSS 63.28%Aug 25, 2005
- Medium5.1Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitr…Check if you run itEPSS 4.30%Aug 19, 2005
- Low2.6Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.Check if you run itEPSS 1.06%Aug 19, 2005
Sort