| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-10339 | 4.3 |
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker wit
|
23-10-2017 - 16:41 | 19-10-2017 - 17:29 | |
| CVE-2005-1598 | 7.5 |
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.
|
19-10-2017 - 01:29 | 16-05-2005 - 04:00 | |
| CVE-2006-7117 | 6.8 |
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and
|
11-10-2017 - 01:31 | 06-03-2007 - 01:19 | |
| CVE-2006-7116 | 7.5 |
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id variable) to index.php.
|
11-10-2017 - 01:31 | 06-03-2007 - 01:19 | |
| CVE-2008-5992 | 7.5 |
Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to (1) diger.php and (2) sayfalar.php.
|
29-09-2017 - 01:32 | 28-01-2009 - 15:30 | |
| CVE-2005-1494 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) entryid or (2) password parameter.
|
11-07-2017 - 01:32 | 11-05-2005 - 04:00 | |
| CVE-2016-5737 | 4.3 |
The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.
|
18-01-2017 - 19:48 | 12-01-2017 - 23:59 | |
| CVE-2000-0480 | 5.0 |
Dragon telnet server allows remote attackers to cause a denial of service via a long username.
|
18-10-2016 - 02:07 | 16-06-2000 - 04:00 | |
| CVE-2000-0479 | 5.0 |
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.
|
18-10-2016 - 02:07 | 16-06-2000 - 04:00 | |
| CVE-2005-1406 | 4.6 |
The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.
|
08-03-2011 - 02:21 | 06-05-2005 - 04:00 |