Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner p…Check if you run itEPSS 0.53%Feb 12, 2001
- High7.5Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.Check if you run itEPSS 9.63%Feb 9, 2001
- High7.5Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.Check this weekEPSS 11.29%Feb 9, 2001
- High7.5Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.Check if you run itEPSS 5.43%Jan 23, 2001
- High7.2MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and poss…Check if you run itEPSS 0.53%Jan 19, 2001
- Medium4.6Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.Check if you run itEPSS 2.26%Jan 9, 2001
- High7.5The installation of Microsoft Exchange 2000 before Rev.Check if you run itEPSS 5.02%Jan 9, 2001
- Medium4.6The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the s…Check if you run itEPSS 2.84%Jan 9, 2001
- Medium4.6The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_pa…Check if you run itEPSS 5.29%Jan 9, 2001
- Medium4.6The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_para…Check if you run itEPSS 2.83%Jan 9, 2001
- Low2.1The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminf…Check if you run itEPSS 5.49%Jan 9, 2001
- Medium4.6The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_par…Check if you run itEPSS 2.83%Jan 9, 2001
- Medium4.6The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_…Check if you run itEPSS 5.25%Jan 9, 2001
- High7.5SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the…Check if you run itEPSS 1.93%Dec 31, 2000
- Medium5.0The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privi…Check if you run itEPSS 4.83%Dec 31, 2000
- Medium4.6Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.Check if you run itEPSS 1.36%Dec 19, 2000
- Medium4.6Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privi…Check if you run itEPSS 2.31%Dec 19, 2000
- Medium5.0Cisco IOS HTTP Server '?/' String VulnerabilityPatch nowKEVEPSS 4.29%Dec 19, 2000
- High7.2MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.Check if you run itEPSS 1.93%Dec 19, 2000
- Medium5.0mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contai…Check this weekEPSS 35.64%Dec 19, 2000
- Critical10.0The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and…Check if you run itEPSS 4.74%Dec 19, 2000
- Medium5.0Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a c…Check this weekEPSS 14.79%Dec 11, 2000
- Medium5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.Check this weekEPSS 50.95%Nov 14, 2000
Sort