Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code…Check if you run itEPSS 1.65%Jan 10, 2005
- High7.5CVE-2004-1122 is listed by apple.Check if you run itEPSS 2.34%Jan 10, 2005
- Medium5.0MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.Check if you run itEPSS 3.72%Jan 10, 2005
- High7.2Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by us…Check if you run itEPSS 0.60%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."Check if you run itEPSS 1.69%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.Check if you run itEPSS 1.41%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.Check if you run itEPSS 1.41%Dec 31, 2004
- High7.5Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.Check if you run itEPSS 1.13%Dec 31, 2004
- Critical10.0Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.Check if you run itEPSS 1.75%Dec 31, 2004
- High7.5SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.Check if you run itEPSS 1.37%Dec 31, 2004
- UnknownCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercaCheck if you run itEPSS 2.07%Dec 31, 2004
- Medium5.0Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number…Check if you run itEPSS 5.57%Dec 31, 2004
- Medium5.0Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.Check this weekEPSS 25.64%Dec 31, 2004
- Medium5.0Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a ..Check if you run itEPSS 1.82%Dec 31, 2004
- Medium4.3Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.Check if you run itEPSS 1.30%Dec 31, 2004
- Low2.1The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.Check if you run itEPSS 0.55%Dec 31, 2004
- High7.5Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary t…Check if you run itEPSS 7.59%Dec 31, 2004
- Medium5.0Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered…Check if you run itEPSS 4.18%Dec 31, 2004
- Medium5.9Cisco IOS Denial-of-Service VulnerabilityPatch nowKEVEPSS 4.84%Dec 30, 2004
- Medium5.0Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.Check if you run itEPSS 3.19%Dec 6, 2004
- Unknownavaya ip600_media_servers Out-of-bounds WritePatch nowKEVEPSS 67.06%Dec 1, 2004
- Medium5.0The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large s…Check if you run itEPSS 7.04%Nov 23, 2004
- Medium5.0PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have differ…Check if you run itEPSS 3.89%Nov 23, 2004
- Medium4.3Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof cont…Check this weekEPSS 20.98%Nov 23, 2004
- Medium5.0The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a h…Check this weekEPSS 10.42%Nov 23, 2004
Sort