| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-0004 | 4.6 |
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.
|
05-08-2022 - 14:26 | 14-04-2005 - 04:00 | |
| CVE-2017-15191 | 5.0 |
In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length.
|
01-03-2019 - 18:12 | 10-10-2017 - 21:29 | |
| CVE-2008-5089 | 9.3 |
Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintRe
|
30-10-2018 - 16:25 | 14-11-2008 - 19:20 | |
| CVE-2006-6268 | 10.0 |
SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a va
|
17-10-2018 - 21:47 | 04-12-2006 - 11:28 | |
| CVE-2005-0095 | 5.0 |
The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU
|
11-10-2017 - 01:29 | 15-01-2005 - 05:00 | |
| CVE-2005-0094 | 5.0 |
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.
|
11-10-2017 - 01:29 | 15-01-2005 - 05:00 | |
| CVE-2015-6013 | 10.0 |
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CV
|
10-09-2017 - 01:29 | 22-01-2016 - 15:59 | |
| CVE-2012-5295 | 4.3 |
Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the windowed parameter.
|
29-08-2017 - 01:32 | 04-10-2012 - 17:55 | |
| CVE-2005-0291 | 4.3 |
Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase.
|
11-07-2017 - 01:32 | 17-01-2005 - 05:00 | |
| CVE-2005-0293 | 5.0 |
Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the month parameter.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-0290 | 7.5 |
NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension.
|
11-07-2017 - 01:32 | 17-01-2005 - 05:00 | |
| CVE-2005-0020 | 7.2 |
Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.
|
11-07-2017 - 01:32 | 14-04-2005 - 04:00 | |
| CVE-2004-2163 | 7.5 |
login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2000-1194 | 7.5 |
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands.
|
05-09-2008 - 20:22 | 31-08-2001 - 04:00 |