Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Outlook Express MHTML URL Processing VulnerabilityPatch nowKEVEPSS 63.25%Feb 13, 2004
- UnknownMultiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.Check if you run itEPSS 2.79%Jan 20, 2004
- UnknownLinux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 3.92%Dec 19, 2003
- Medium5.0Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded nul…Check if you run itEPSS 1.51%Dec 15, 2003
- UnknownWindows 2000 SP3 and SP4 PerformScmStage function VulnerabilityPatch nowKEVEPSS 58.81%Aug 1, 2003
- Critical9.0MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a con…Check this weekEPSS 44.83%Mar 24, 2003
- Medium5.0The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Ma…Check if you run itEPSS 1.27%Dec 31, 2002
- High7.5The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthoriz…Check this weekEPSS 16.12%Dec 31, 2002
- Critical10.0Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be use…Check if you run itEPSS 3.68%Dec 26, 2002
- High7.5libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_…Check if you run itEPSS 6.78%Dec 23, 2002
- High7.5The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-characte…Check this weekEPSS 20.45%Dec 23, 2002
- Medium4.6Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."Check if you run itEPSS 0.32%Dec 11, 2002
- Medium4.6Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."Check if you run itEPSS 0.32%Dec 11, 2002
- Medium6.8The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Wind…Check this weekEPSS 15.76%Oct 4, 2002
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.92%Mar 13, 2002
- Low2.1Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtai…Check if you run itEPSS 0.34%Dec 31, 2001
- Critical9.8Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is n…Check if you run itEPSS 8.16%Oct 18, 2001
- High7.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus…Check if you run itEPSS 0.47%Oct 17, 2001
- Medium4.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.Check if you run itEPSS 0.61%Oct 2, 2001
- High7.2Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in…Check if you run itEPSS 1.62%Aug 14, 2001
- Medium5.0Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending t…Check if you run itEPSS 2.23%Jul 21, 2001
- Medium5.0Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requ…Check if you run itEPSS 2.08%Jul 21, 2001
- Critical10.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the co…Check this weekEPSS 85.20%Jul 21, 2001
- Medium4.6Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with ..Check if you run itEPSS 2.22%Jun 27, 2001
- High7.2"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner p…Check if you run itEPSS 0.53%Feb 12, 2001
Sort