| Max CVSS | 7.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-10410 | 5.8 |
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Search). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability
|
03-10-2019 - 00:03 | 19-10-2017 - 17:29 | |
| CVE-2005-1398 | 5.0 |
phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters. NOTE: it was later reported that 3.4 through 4.6.4 are also affected.
|
19-10-2018 - 15:31 | 03-05-2005 - 04:00 | |
| CVE-2008-5841 | 7.5 |
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action
|
29-09-2017 - 01:32 | 05-01-2009 - 16:30 | |
| CVE-2012-0917 | 4.3 |
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
29-08-2017 - 01:31 | 24-01-2012 - 18:55 | |
| CVE-2012-0919 | 4.3 |
Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly other versions before 03-00-06, allows remote attackers to inject arbitrary web script or HTML via unspecified
|
29-08-2017 - 01:31 | 24-01-2012 - 18:55 | |
| CVE-2006-6241 | 4.0 |
Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to cause a denial of service (crash) via consecutive RETR commands. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information
|
29-07-2017 - 01:29 | 03-12-2006 - 19:28 | |
| CVE-2005-1376 | 7.5 |
Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files.
|
11-07-2017 - 01:32 | 03-05-2005 - 04:00 | |
| CVE-2005-1372 | 4.6 |
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
|
11-07-2017 - 01:32 | 03-05-2005 - 04:00 | |
| CVE-2005-1349 | 7.5 |
Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-1374 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via (1) exercise_result.php, (2) exercice_submit.php, (3) agend
|
11-07-2017 - 01:32 | 03-05-2005 - 04:00 | |
| CVE-2005-1377 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.
|
11-07-2017 - 01:32 | 03-05-2005 - 04:00 | |
| CVE-2005-1375 | 7.5 |
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (
|
11-07-2017 - 01:32 | 03-05-2005 - 04:00 | |
| CVE-2005-1380 | 6.8 |
Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web script or HTML via the server parameter to a JndiFramesetAction action.
|
11-07-2017 - 01:32 | 03-05-2005 - 04:00 | |
| CVE-2005-1397 | 7.5 |
SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
11-07-2017 - 01:32 | 03-05-2005 - 04:00 | |
| CVE-2004-2512 | 4.3 |
CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2015-8929 | 4.3 |
Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.
|
01-07-2017 - 01:29 | 20-09-2016 - 14:15 | |
| CVE-2000-0535 | 5.0 |
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.
|
10-09-2008 - 19:05 | 12-06-2000 - 04:00 | |
| CVE-2005-1429 | 7.5 |
SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
|
05-09-2008 - 20:49 | 03-05-2005 - 04:00 |