| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-10372 | 5.5 |
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with ne
|
03-10-2019 - 00:03 | 19-10-2017 - 17:29 | |
| CVE-2006-6389 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via the (1) Taaa parameter to (a) up.php, or the (2) pollhtml and (3) Bloks parameters to (b) polls.php, different vector
|
17-10-2018 - 21:48 | 08-12-2006 - 01:28 | |
| CVE-2008-4714 | 7.5 |
Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2005-1530 | 5.0 |
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
|
11-07-2017 - 01:32 | 19-07-2005 - 04:00 | |
| CVE-2004-2212 | 7.5 |
SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forum_id parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-2211 | 4.3 |
Cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) forum_id, (2) method, or (3) forum_title parameters to post.asp, (4) the forum_title parameter to forum.asp,
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2016-4446 | 6.9 |
The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function.
|
17-04-2017 - 13:29 | 11-04-2017 - 18:59 | |
| CVE-2005-2310 | 9.3 |
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.
|
08-03-2011 - 02:24 | 19-07-2005 - 04:00 | |
| CVE-2000-0576 | 5.0 |
Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.
|
10-09-2008 - 19:05 | 05-07-2000 - 04:00 |