| Max CVSS | 7.8 | Min CVSS | 3.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4078 | 6.5 |
SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
|
09-02-2024 - 20:08 | 15-09-2008 - 15:14 | |
| CVE-2008-4077 | 7.8 |
The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length.
|
09-02-2024 - 16:11 | 15-09-2008 - 15:14 | |
| CVE-2017-11763 | 6.8 |
The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code executi
|
03-10-2019 - 00:03 | 13-10-2017 - 13:29 | |
| CVE-2006-5955 | 7.5 |
SQL injection vulnerability in listings.asp in 20/20 DataShed (aka Real Estate Listing System) allows remote attackers to execute arbitrary SQL commands via the itemID parameter. NOTE: some of these details are obtained from third party information.
|
17-10-2018 - 21:46 | 17-11-2006 - 00:07 | |
| CVE-2000-0260 | 7.5 |
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability.
|
12-10-2018 - 21:29 | 14-04-2000 - 04:00 | |
| CVE-2004-0832 | 5.0 |
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be
|
11-10-2017 - 01:29 | 03-11-2004 - 05:00 | |
| CVE-2011-5221 | 4.3 |
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.
|
29-08-2017 - 01:30 | 25-10-2012 - 17:55 | |
| CVE-2004-1661 | 7.5 |
MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."
|
11-07-2017 - 01:31 | 02-09-2004 - 04:00 | |
| CVE-2004-1465 | 3.7 |
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1659 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.
|
11-07-2017 - 01:31 | 02-09-2004 - 04:00 | |
| CVE-2004-1658 | 4.6 |
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceT
|
11-07-2017 - 01:31 | 02-09-2004 - 04:00 | |
| CVE-2010-2512 | 7.5 |
SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-06-2010 - 04:00 | 28-06-2010 - 20:30 | |
| CVE-2004-0637 | 6.5 |
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.
|
10-09-2008 - 04:00 | 02-09-2004 - 04:00 |