| Max CVSS | 6.4 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-1879 | 2.1 |
LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
|
26-01-2024 - 17:01 | 09-06-2005 - 04:00 | |
| CVE-2005-1880 | 2.1 |
everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
|
26-01-2024 - 17:00 | 06-06-2005 - 04:00 | |
| CVE-2017-10154 | 5.0 |
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac
|
23-10-2017 - 21:58 | 19-10-2017 - 17:29 | |
| CVE-2000-0539 | 6.4 |
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
|
10-10-2017 - 01:29 | 22-06-2000 - 04:00 | |
| CVE-2000-0540 | 5.0 |
JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information.
|
10-10-2017 - 01:29 | 22-06-2000 - 04:00 | |
| CVE-2004-1598 | 5.0 |
Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary directory.
|
11-07-2017 - 01:31 | 12-10-2004 - 04:00 | |
| CVE-2005-1899 | 5.0 |
Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a denial of service (infinite loop) via a zero-byte UDP
|
18-10-2016 - 03:23 | 09-06-2005 - 04:00 | |
| CVE-2014-8123 | 5.0 |
Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of service (crash) via a crafted document.
|
05-12-2014 - 17:20 | 05-12-2014 - 16:59 | |
| CVE-2005-1932 | 2.1 |
Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, (2) close, open, or respond t
|
05-09-2008 - 20:50 | 05-07-2005 - 04:00 | |
| CVE-2005-1888 | 4.3 |
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
|
05-09-2008 - 20:50 | 06-06-2005 - 04:00 | |
| CVE-2005-1877 | 4.3 |
Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid parameter.
|
05-09-2008 - 20:50 | 06-06-2005 - 04:00 |