| Max CVSS | 10.0 | Min CVSS | 3.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-2498 | 7.5 |
Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certai
|
14-02-2024 - 15:47 | 15-08-2005 - 04:00 | |
| CVE-2017-10054 | 3.6 |
Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMS). The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows unauthenticated attack
|
03-10-2019 - 00:03 | 19-10-2017 - 17:29 | |
| CVE-2004-0951 | 7.5 |
The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.
|
30-10-2018 - 16:25 | 31-12-2004 - 05:00 | |
| CVE-2006-6385 | 7.2 |
Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers (aka NDIS miniport drivers) before 20061205 allows local users to execute arbitrary code with "kernel-level" privileges via an incor
|
17-10-2018 - 21:48 | 08-12-2006 - 01:28 | |
| CVE-2008-4366 | 6.5 |
Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the fi
|
29-09-2017 - 01:32 | 30-09-2008 - 23:24 | |
| CVE-2013-5300 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php
|
29-08-2017 - 01:33 | 15-08-2013 - 20:55 | |
| CVE-2005-2592 | 7.5 |
Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.
|
11-07-2017 - 01:32 | 17-08-2005 - 04:00 | |
| CVE-2005-2593 | 10.0 |
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.
|
11-07-2017 - 01:32 | 17-08-2005 - 04:00 | |
| CVE-2005-2590 | 4.3 |
Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
|
11-07-2017 - 01:32 | 17-08-2005 - 04:00 | |
| CVE-2005-2591 | 5.0 |
Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability.
|
11-07-2017 - 01:32 | 17-08-2005 - 04:00 | |
| CVE-2005-2613 | 6.4 |
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors.
|
11-07-2017 - 01:32 | 17-08-2005 - 04:00 | |
| CVE-2016-1237 | 4.9 |
nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c.
|
28-11-2016 - 19:58 | 29-06-2016 - 14:10 | |
| CVE-2000-0648 | 5.0 |
WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.
|
10-09-2008 - 19:05 | 11-07-2000 - 04:00 | |
| CVE-2005-2614 | 7.5 |
Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other multiple extensions that include .php.
|
05-09-2008 - 20:52 | 17-08-2005 - 04:00 | |
| CVE-2005-2589 | 7.5 |
Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without using encryption.
|
05-09-2008 - 20:52 | 17-08-2005 - 04:00 | |
| CVE-2005-2101 | 5.0 |
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files.
|
05-09-2008 - 20:50 | 17-08-2005 - 04:00 |