Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.Check if you run itEPSS 2.55%Apr 14, 2005
- Medium5.0MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed…Check if you run itEPSS 2.53%Mar 15, 2005
- UnknownInteger underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppCheck if you run itEPSS 2.70%Mar 1, 2005
- Low2.1The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink atta…Check if you run itEPSS 0.41%Feb 9, 2005
- Medium6.8Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other…Check if you run itEPSS 2.43%Feb 9, 2005
- Medium5.0Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multip…Check this weekEPSS 58.73%Feb 9, 2005
- High7.8Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apac…Check if you run itEPSS 4.83%Feb 9, 2005
- UnknownMicrosoft Internet Explorer Drag-and-Drop VulnerabilityPatch nowKEVEPSS 59.78%Feb 8, 2005
- UnknownDHTML Editing Component ActiveX Control VulnerabilityPatch nowKEVEPSS 26.92%Feb 8, 2005
- UnknownMicrosoft asp.net Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 75.70%Feb 8, 2005
- UnknownMicrosoft Internet Explorer HTML Help ActiveX control Cross Domain VulnerabilityPatch nowKEVEPSS 44.98%Jan 11, 2005
- High7.5CVE-2004-1314 is listed by apple.Check if you run itEPSS 2.36%Jan 10, 2005
- UnknownStack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.Check this weekEPSS 11.40%Jan 10, 2005
- Medium5.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code…Check if you run itEPSS 1.65%Jan 10, 2005
- High7.5CVE-2004-1122 is listed by apple.Check if you run itEPSS 2.34%Jan 10, 2005
- Medium5.0MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.Check if you run itEPSS 3.72%Jan 10, 2005
- High7.2Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by us…Check if you run itEPSS 0.60%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."Check if you run itEPSS 1.69%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.Check if you run itEPSS 1.41%Dec 31, 2004
- Critical10.0Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.Check if you run itEPSS 1.41%Dec 31, 2004
- High7.5Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.Check if you run itEPSS 1.13%Dec 31, 2004
- Critical10.0Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.Check if you run itEPSS 1.75%Dec 31, 2004
- High7.5SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.Check if you run itEPSS 1.37%Dec 31, 2004
- UnknownCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercaCheck if you run itEPSS 2.07%Dec 31, 2004
- Medium5.0Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number…Check if you run itEPSS 5.57%Dec 31, 2004
Sort