| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-5295 | 5.5 |
The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files
|
13-02-2023 - 00:53 | 20-01-2016 - 16:59 | |
| CVE-2016-2211 | 9.3 |
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protectio
|
08-09-2021 - 17:19 | 30-06-2016 - 23:59 | |
| CVE-2017-10395 | 5.5 |
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privile
|
03-10-2019 - 00:03 | 19-10-2017 - 17:29 | |
| CVE-2014-4471 | 6.8 |
WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnera
|
08-03-2019 - 16:06 | 10-12-2014 - 21:59 | |
| CVE-2005-2428 | 5.0 |
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password ha
|
10-09-2017 - 01:29 | 03-08-2005 - 04:00 | |
| CVE-2008-4670 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via the search box. NOTE: the provenance of this information is unknown; the details are obtained sole
|
08-08-2017 - 01:32 | 22-10-2008 - 10:30 | |
| CVE-2006-6223 | 4.3 |
Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded q parameter.
|
29-07-2017 - 01:29 | 02-12-2006 - 02:28 | |
| CVE-2005-4729 | 7.5 |
SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID parameter.
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2005-2442 | 5.0 |
Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one application into another.
|
11-07-2017 - 01:32 | 03-08-2005 - 04:00 | |
| CVE-2005-2427 | 4.3 |
Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter.
|
11-07-2017 - 01:32 | 03-08-2005 - 04:00 | |
| CVE-2005-2426 | 2.1 |
FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and disconnections without using the QUIT command.
|
11-07-2017 - 01:32 | 03-08-2005 - 04:00 | |
| CVE-2005-2390 | 6.4 |
Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive.
|
18-10-2016 - 03:26 | 27-07-2005 - 04:00 | |
| CVE-2000-0574 | 5.0 |
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of s
|
10-09-2008 - 19:05 | 07-07-2000 - 04:00 | |
| CVE-2005-2386 | 4.3 |
Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
|
05-09-2008 - 20:51 | 27-07-2005 - 04:00 |