Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary co…Check this weekEPSS 13.91%Apr 21, 2006
- UnknownMicrosoft Internet Explorer Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 68.34%Apr 11, 2006
- UnknownMicrosoft Office Out-of-bounds WritePatch nowKEVEPSS 14.21%Mar 14, 2006
- Medium4.6MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_r…Check if you run itEPSS 1.37%Feb 27, 2006
- Low2.1MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query…Check if you run itEPSS 0.80%Jan 22, 2006
- Medium5.0Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the m…Check if you run itEPSS 1.03%Dec 31, 2005
- UnknownIceWarp Web Mail HTTP_USER_AGENT VulnerabilityPatch nowKEVEPSS 8.60%Dec 27, 2005
- UnknownIceWarp Web Mail Language Parameter PHP Code VulnerabilityPatch nowKEVEPSS 8.49%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 9.48%Dec 27, 2005
- Unknowndeerfield visnetic_mail_server Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 10.57%Dec 27, 2005
- Medium6.3SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs pCheck if you run itEPSS 1.39%Dec 19, 2005
- Medium5.0Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they ca…Check if you run itEPSS 1.09%Oct 26, 2005
- Critical9.8Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian charaCheck this weekEPSS 23.26%Oct 17, 2005
- Unknownati catalyst_driver Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 63.25%Oct 11, 2005
- UnknownMicrosoft Internet Explorer HTML E-mail Feature VulnerabilityPatch nowKEVEPSS 11.21%Aug 25, 2005
- UnknownMicrosoft IIS 4.0 and 5.0 Folder Traversal VulnerabilityPatch nowKEVEPSS 63.28%Aug 25, 2005
- Medium5.0Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that define…Check if you run itEPSS 3.10%Aug 17, 2005
- High8.5MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibl…Check if you run itEPSS 4.73%Aug 16, 2005
- UnknownMicrosoft Windows Out-of-bounds WritePatch nowKEVEPSS 93.01%Aug 9, 2005
- Critical9.8Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.Check this weekEPSS 11.01%Jul 18, 2005
- UnknownMicrosoft IE 5.01 SP4 up to 6 javaprxy.dll COM Instantiation Heap Corruption VulnerabilityPatch nowKEVEPSS 61.37%Jul 12, 2005
- Medium5.3Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, whichCheck if you run itEPSS 1.91%May 20, 2005
- Medium5.0phpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%May 2, 2005
- Medium5.0The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs…Check if you run itEPSS 1.65%May 2, 2005
- Medium5.0MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed…Check if you run itEPSS 2.53%Mar 15, 2005
Sort