Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Wind…Check this weekEPSS 15.76%Oct 4, 2002
- Medium5.0mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a…Check if you run itEPSS 7.04%Sep 25, 2002
- High7.5Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code…Check this weekEPSS 77.71%Sep 24, 2002
- High7.5Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.Check if you run itEPSS 7.82%Sep 24, 2002
- High7.5Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.Check this weekEPSS 26.17%Sep 5, 2002
- Critical10.0Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileg…Check this weekEPSS 46.31%Sep 5, 2002
- Medium5.0Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which le…Check this weekEPSS 58.68%Sep 5, 2002
- Medium5.0Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.Check this weekEPSS 10.66%Aug 12, 2002
- High7.5Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system…Check this weekEPSS 20.26%Aug 12, 2002
- High7.5Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via ..Check this weekEPSS 69.70%Aug 12, 2002
- Medium5.0The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.Check this weekEPSS 36.20%Aug 12, 2002
- High7.5Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.Check if you run itEPSS 9.23%Aug 12, 2002
- High7.5Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2…Check this weekEPSS 89.82%Aug 12, 2002
- High7.5OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to…Check if you run itEPSS 8.17%Aug 12, 2002
- Medium5.0The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Re…Check this weekEPSS 18.29%Aug 12, 2002
- High7.5Microsoft data_engine Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 84.75%Aug 12, 2002
- High7.5SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.Check if you run itEPSS 3.84%Aug 12, 2002
- High7.5Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner…Check this weekEPSS 11.42%Aug 12, 2002
- Low2.1An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several subm…Check if you run itEPSS 2.22%Aug 12, 2002
- High7.5Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.Check if you run itEPSS 3.80%Aug 12, 2002
- High7.5Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping,…Check this weekEPSS 13.60%Jul 23, 2002
- Medium4.6The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them afte…Check if you run itEPSS 1.70%Jul 23, 2002
- High7.2The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has ins…Check this weekEPSS 48.07%Jul 23, 2002
- High7.5Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database admini…Check this weekEPSS 11.24%Jul 23, 2002
- High7.5Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to…Check this weekEPSS 22.84%Jul 23, 2002
Sort