| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-1527 | 5.0 |
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function
|
14-02-2024 - 16:58 | 15-08-2005 - 04:00 | |
| CVE-2005-2575 | 7.5 |
SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable.
|
29-04-2021 - 15:15 | 16-08-2005 - 04:00 | |
| CVE-2017-10398 | 3.2 |
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged att
|
03-10-2019 - 00:03 | 19-10-2017 - 17:29 | |
| CVE-2005-1982 | 3.6 |
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain control
|
30-04-2019 - 14:27 | 10-08-2005 - 04:00 | |
| CVE-2005-2098 | 5.0 |
The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore
|
19-10-2018 - 15:32 | 23-08-2005 - 04:00 | |
| CVE-2005-2097 | 2.1 |
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when
|
19-10-2018 - 15:32 | 16-08-2005 - 04:00 | |
| CVE-2014-6369 | 9.3 |
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
|
12-10-2018 - 22:07 | 11-12-2014 - 00:59 | |
| CVE-2005-3885 | 2.1 |
The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.
|
03-10-2018 - 21:34 | 29-11-2005 - 19:03 | |
| CVE-2013-3445 | 5.0 |
The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service (CPU consumption or process crash) via a flood of malformed IP packets, aka Bug ID CSCug94572.
|
29-11-2017 - 02:29 | 29-07-2013 - 13:59 | |
| CVE-2000-0640 | 7.5 |
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
|
10-10-2017 - 01:29 | 08-07-2000 - 04:00 | |
| CVE-2012-0110 | 4.4 |
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK.
|
14-01-2014 - 04:14 | 18-01-2012 - 22:55 | |
| CVE-2005-2602 | 2.6 |
Mozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, which causes the address bar to go blank and could facilitate phishing attacks.
|
05-09-2008 - 20:52 | 17-08-2005 - 04:00 | |
| CVE-2005-2594 | 5.0 |
Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that defines a handler for itself within the function body.
|
05-09-2008 - 20:52 | 17-08-2005 - 04:00 |