Max CVSS 10.0 Min CVSS 4.3 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2005-4048 7.5
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbi
30-10-2018 - 16:25 07-12-2005 - 11:03
CVE-2005-4051 5.0
e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php.
19-10-2018 - 15:40 07-12-2005 - 11:03
CVE-2005-3807 4.9
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlea
19-10-2018 - 15:39 25-11-2005 - 21:03
CVE-2016-3278 9.3
Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
12-10-2018 - 22:12 13-07-2016 - 01:59
CVE-2008-4509 10.0
Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct reque
29-09-2017 - 01:32 09-10-2008 - 18:00
CVE-2006-6610 7.5
clientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to "remote console command injection."
29-07-2017 - 01:29 18-12-2006 - 02:28
CVE-2006-6609 5.0
Nexuiz before 2.2.1 allows remote attackers to cause a denial of service (resource exhaustion or crash) via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information.
29-07-2017 - 01:29 18-12-2006 - 02:28
CVE-2005-4094 7.5
connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.
20-07-2017 - 01:29 08-12-2005 - 11:03
CVE-2005-4095 5.0
Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command.
20-07-2017 - 01:29 08-12-2005 - 11:03
CVE-2005-4055 7.5
SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) page and (2) car parameters.
20-07-2017 - 01:29 07-12-2005 - 11:03
CVE-2005-4060 4.3
Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.
20-07-2017 - 01:29 07-12-2005 - 11:03
CVE-2004-1097 10.0
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary cod
11-07-2017 - 01:30 10-01-2005 - 05:00
CVE-2005-4064 7.5
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.
08-03-2011 - 02:27 07-12-2005 - 11:03
CVE-2005-4054 7.5
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day parameter.
08-03-2011 - 02:27 07-12-2005 - 11:03
CVE-2000-0784 10.0
sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.
05-09-2008 - 20:21 20-10-2000 - 04:00
Back to Top Mark selected
Back to Top