| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2000-0583 | 5.0 |
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting dire
|
14-02-2024 - 01:17 | 30-06-2000 - 04:00 | |
| CVE-2014-9129 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) at
|
02-02-2023 - 17:54 | 05-12-2014 - 15:59 | |
| CVE-2017-10361 | 5.5 |
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low p
|
03-10-2019 - 00:03 | 19-10-2017 - 17:29 | |
| CVE-2006-6298 | 7.5 |
SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters.
|
17-10-2018 - 21:47 | 05-12-2006 - 11:28 | |
| CVE-2008-4322 | 10.0 |
Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FC_INFOTAG/SET_CONTROL packet.
|
11-10-2018 - 20:51 | 29-09-2008 - 19:25 | |
| CVE-2016-5821 | 7.2 |
Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse (1) SspiCli.dl
|
09-10-2018 - 20:00 | 13-07-2016 - 15:59 | |
| CVE-2005-2205 | 7.5 |
The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
|
05-09-2008 - 20:51 | 11-07-2005 - 04:00 | |
| CVE-2005-2215 | 4.3 |
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-
|
05-09-2008 - 20:51 | 12-07-2005 - 04:00 | |
| CVE-2004-2194 | 5.0 |
MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands.
|
05-09-2008 - 20:43 | 31-12-2004 - 05:00 |