| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-11292 | 6.0 |
Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could le
|
27-01-2023 - 19:24 | 22-10-2017 - 19:29 | |
| CVE-2005-0851 | 5.0 |
FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings.
|
28-07-2020 - 16:35 | 02-05-2005 - 04:00 | |
| CVE-2005-0850 | 5.0 |
FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1, and others.
|
28-07-2020 - 16:34 | 02-05-2005 - 04:00 | |
| CVE-2006-6260 | 7.5 |
SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
17-10-2018 - 21:47 | 04-12-2006 - 11:28 | |
| CVE-2005-0853 | 5.0 |
betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later. NOTE: it
|
11-10-2017 - 01:30 | 02-05-2005 - 04:00 | |
| CVE-2004-0968 | 2.1 |
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
|
11-10-2017 - 01:29 | 09-02-2005 - 05:00 | |
| CVE-2000-0507 | 5.0 |
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
|
10-10-2017 - 01:29 | 01-06-2000 - 04:00 | |
| CVE-2008-6466 | 7.5 |
SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action.
|
29-09-2017 - 01:33 | 13-03-2009 - 10:30 | |
| CVE-2012-5100 | 5.0 |
Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot dot encoded backslash) or (2) %2e%2e%5c (encoded dot dot backslash) in the PATH_INFO.
|
29-08-2017 - 01:32 | 23-09-2012 - 17:55 | |
| CVE-2005-0841 | 7.5 |
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrate
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-0854 | 7.5 |
betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-0864 | 5.0 |
The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request.
|
05-09-2008 - 20:47 | 02-05-2005 - 04:00 | |
| CVE-2005-0865 | 7.5 |
Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi.
|
05-09-2008 - 20:47 | 02-05-2005 - 04:00 |