Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 86.09%Dec 28, 2005
- UnknownIceWarp Web Mail HTTP_USER_AGENT VulnerabilityPatch nowKEVEPSS 8.60%Dec 27, 2005
- UnknownIceWarp Web Mail Language Parameter PHP Code VulnerabilityPatch nowKEVEPSS 8.49%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.48%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.57%Dec 27, 2005
- High7.8The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to caus…Check this weekEPSS 11.91%Dec 22, 2005
- Medium6.3SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs pCheck if you run itEPSS 1.39%Dec 19, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to i…Check this weekEPSS 73.69%Dec 13, 2005
- UnknownMicrosoft Internet Explorer Javascript BODY onload VulnerabilityPatch nowKEVEPSS 83.47%Dec 13, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web scri…Check if you run itEPSS 1.21%Dec 3, 2005
- High7.8Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function.Check if you run itEPSS 1.31%Nov 29, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the que…Check this weekEPSS 25.71%Nov 22, 2005
- Unknownmambo mambo_site_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.88%Nov 22, 2005
- Low2.6jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.Check if you run itEPSS 3.06%Nov 17, 2005
- High7.5Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id pa…Check if you run itEPSS 2.50%Nov 17, 2005
- Medium5.0Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web director…Check if you run itEPSS 5.95%Nov 6, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE04.Check if you run itEPSS 3.77%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE03.Check if you run itEPSS 5.14%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02.Check if you run itEPSS 3.77%Nov 2, 2005
- Critical10.0Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE01.Check if you run itEPSS 2.96%Nov 2, 2005
- Medium5.0Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they ca…Check if you run itEPSS 1.09%Oct 26, 2005
- Medium5.0Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted…Check this weekEPSS 14.19%Oct 25, 2005
- High7.3Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an evalCheck if you run itEPSS 3.88%Oct 24, 2005
- Medium5.0The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification…Check if you run itEPSS 4.87%Oct 18, 2005
- Critical9.8Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian charaCheck this weekEPSS 23.26%Oct 17, 2005
Sort