Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously…Check if you run itEPSS 1.64%Nov 25, 2008
- Medium4.3The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive infor…Check if you run itEPSS 8.60%Nov 17, 2008
- Low1.9Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive in…Check if you run itEPSS 0.32%Nov 17, 2008
- UnknownMicrosoft Office Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 59.00%Oct 15, 2008
- Medium6.4Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affe…Check if you run itEPSS 2.23%Oct 14, 2008
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 6.51%Sep 26, 2008
- High8.1Cisco IOS Cross-Site Request Forgery VulnerabilityPatch nowKEVEPSS 33.87%Sep 18, 2008
- UnknownOpenBSD openssh Improper Input ValidationPatch nowKEVEPSS 2.37%Aug 22, 2008
- High8.8Oracle VirtualBox Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 6.88%Aug 5, 2008
- Medium5.0Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by rea…Check if you run itEPSS 1.18%Jul 14, 2008
- UnknownMicrosoft Office Word 2002 SP3 Malformed Data Remote Code ExecutionPatch nowKEVEPSS 32.14%Jul 9, 2008
- UnknownMicrosoft jet Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 28.27%May 13, 2008
- Medium4.6MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TAB…Check if you run itEPSS 2.59%May 5, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the documen…Check if you run itEPSS 1.83%Mar 19, 2008
- Medium4.3Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vec…Check if you run itEPSS 1.83%Mar 19, 2008
- High8.8Adobe Acrobat and Reader Unspecified VulnerabilityPatch nowKEVEPSS 37.87%Feb 7, 2008
- Unknownourgame.com glworld Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 7.30%Feb 7, 2008
- Medium4.3Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all doma…Check if you run itEPSS 0.65%Dec 28, 2007
- Medium4.3WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of…Check if you run itEPSS 3.10%Dec 19, 2007
- Unknownjustsystem ichitaro Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.09%Dec 18, 2007
- UnknownMicrosoft Windows Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.90%Dec 11, 2007
- Medium5.0The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL…Check if you run itEPSS 2.96%Dec 10, 2007
- Low3.5MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authe…Check if you run itEPSS 2.23%Dec 10, 2007
- Medium5.8MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of tabl…Check if you run itEPSS 2.13%Dec 10, 2007
- High7.5The default configuration of Safari in Apple Mac OS X 10.4 through 10.4.10 adds a private key to the keychain with permissions that allow other applications to access…Check if you run itEPSS 1.76%Nov 15, 2007
Sort