Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to have an unspecified impact via a "dangerous file."Check if you run itEPSS 1.09%Dec 7, 2010
- High7.8Linux Kernel Improper Input Validation VulnerabilityPatch nowKEVEPSS 15.86%Dec 6, 2010
- UnknownArray index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigCheck if you run itEPSS 0.40%Nov 5, 2010
- UnknownLinux Kernel Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 3.53%Sep 15, 2010
- UnknownLinux Kernel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.54%Aug 12, 2010
- High8.8Red Hat Linux JBoss Seam 2 Remote Code Execution VulnerabilityPatch nowKEVEPSS 83.40%Aug 4, 2010
- UnknownRed Hat linux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 41.63%Feb 15, 2010
- UnknownRed Hat Linux Piranha Package Linux Virtual Server (LVS) VulnerabilityPatch nowKEVEPSS 73.66%Feb 15, 2010
- UnknownHeap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of serviceCheck if you run itEPSS 5.17%Nov 20, 2009
- Medium4.6CVE-2008-4098 is listed by oracle.Check if you run itEPSS 1.62%Sep 18, 2008
- Unknownmake_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line,Check if you run itEPSS 0.29%Oct 23, 2007
- UnknownInteger overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to anCheck this weekEPSS 70.39%Jul 16, 2007
- UnknownOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KECheck if you run itEPSS 2.40%Apr 25, 2007
- Unknownsuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- UnknownMutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing between signed and unsigned portions ofCheck if you run itEPSS 2.83%Mar 6, 2007
- UnknownMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domain policy by tricking a user into savingCheck if you run itEPSS 1.51%Feb 23, 2007
- UnknownClam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumpCheck if you run itEPSS 3.50%Feb 16, 2007
- Medium6.3SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs pCheck if you run itEPSS 1.39%Dec 19, 2005
- High7.3Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an evalCheck if you run itEPSS 3.88%Oct 24, 2005
- Critical9.8Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian charaCheck this weekEPSS 23.26%Oct 17, 2005
- High7.5The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attacCheck if you run itEPSS 0.84%Sep 16, 2005
- Critical9.8Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.Check this weekEPSS 11.01%Jul 18, 2005
- Medium5.3Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, whichCheck if you run itEPSS 1.91%May 20, 2005
- Medium4.7Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissionCheck if you run itEPSS 0.31%May 2, 2005
- Critical9.8Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width anCheck if you run itEPSS 3.38%Apr 15, 2005
Sort