| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-1349 | 2.1 |
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
|
24-03-2023 - 18:12 | 04-10-2004 - 04:00 | |
| CVE-2000-0295 | 10.0 |
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
|
19-10-2018 - 15:29 | 21-04-2000 - 04:00 | |
| CVE-2006-6932 | 7.5 |
Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp.
|
16-10-2018 - 16:29 | 16-01-2007 - 23:28 | |
| CVE-2008-4179 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) page_id parameter to smileys.php and the (2) q parameter to search.php.
|
11-10-2018 - 20:51 | 23-09-2008 - 15:25 | |
| CVE-2014-8539 | 4.3 |
Cross-site scripting (XSS) vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the mod_simpleemailform_field2_1 parameter to index.php.
|
09-10-2018 - 19:54 | 21-11-2014 - 15:59 | |
| CVE-2017-11804 | 7.6 |
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scr
|
19-10-2017 - 19:37 | 13-10-2017 - 13:29 | |
| CVE-2004-1574 | 7.5 |
Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1575 | 5.0 |
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-0601 | 7.5 |
distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.
|
11-07-2017 - 01:30 | 23-12-2004 - 05:00 | |
| CVE-2004-0564 | 2.1 |
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "i
|
11-07-2017 - 01:30 | 23-12-2004 - 05:00 | |
| CVE-2004-2225 | 5.0 |
Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.
|
05-09-2008 - 20:43 | 31-12-2004 - 05:00 |