Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and cond…Check this weekEPSS 26.11%Jul 5, 2005
- Medium4.3The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application fi…Check this weekEPSS 20.46%Jul 5, 2005
- UnknownVeritas Backup Exec Agent Out-of-bounds WritePatch nowKEVEPSS 86.37%Jun 24, 2005
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script…Check this weekEPSS 14.22%Jun 14, 2005
- Medium5.1The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to…Check if you run itEPSS 0.74%May 26, 2005
- Medium5.3Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, whichCheck if you run itEPSS 2.04%May 20, 2005
- Medium4.6mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allow…Check if you run itEPSS 0.61%May 17, 2005
- Low2.6Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.Check if you run itEPSS 2.20%May 3, 2005
- High7.5Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument.Check this weekEPSS 29.10%May 2, 2005
- Medium4.7Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissionCheck if you run itEPSS 0.31%May 2, 2005
- Medium5.0AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XM…Check if you run itEPSS 1.82%May 2, 2005
- Medium5.0phpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%May 2, 2005
- Medium5.0Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.Check this weekEPSS 23.44%May 2, 2005
- Medium5.0Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or moving a folder with deeply neste…Check if you run itEPSS 4.53%May 2, 2005
- Low2.1MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE priv…Check if you run itEPSS 1.70%May 2, 2005
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute a…Check this weekEPSS 12.84%May 2, 2005
- Medium4.6MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTIO…Check this weekEPSS 18.44%May 2, 2005
- High7.5Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execu…Check this weekEPSS 72.98%May 2, 2005
- Medium4.3Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HT…Check if you run itEPSS 1.26%May 2, 2005
- Medium5.0The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs…Check if you run itEPSS 1.65%May 2, 2005
- High7.5The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE da…Check this weekEPSS 33.36%May 2, 2005
- Medium5.0AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overflow.Check if you run itEPSS 2.45%May 2, 2005
- Medium5.8Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.Check this weekEPSS 25.56%Apr 27, 2005
- Critical9.8Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width anCheck if you run itEPSS 3.38%Apr 15, 2005
- Medium4.6The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrar…Check if you run itEPSS 0.60%Apr 14, 2005
Sort