| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-5014 | 5.8 |
In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.
|
01-12-2020 - 14:54 | 20-01-2017 - 08:59 | |
| CVE-2017-1341 | 4.3 |
IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. IBM X-Force ID: 126456.
|
03-10-2019 - 00:03 | 07-12-2017 - 15:29 | |
| CVE-2014-8642 | 4.3 |
Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the networ
|
30-10-2018 - 16:27 | 14-01-2015 - 11:59 | |
| CVE-2006-5313 | 6.5 |
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter. NOTE: this crosses privilege boundaries if the SMTP server configur
|
17-10-2018 - 21:42 | 17-10-2006 - 17:07 | |
| CVE-2006-5317 | 7.5 |
PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the contentSpecial parameter.
|
17-10-2018 - 21:42 | 17-10-2006 - 17:07 | |
| CVE-2006-5262 | 6.5 |
CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary IMAP commands via a CRLF sequence in a mailbox name. NOTE: the attack crosses privilege boundaries if th
|
17-10-2018 - 21:41 | 12-10-2006 - 22:07 | |
| CVE-2006-5239 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the query string (PHP_SELF) in kalender.php or (2) the captcha_session_code parameter in pre_detail
|
17-10-2018 - 21:41 | 12-10-2006 - 00:07 | |
| CVE-2006-7159 | 6.4 |
Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.
|
16-10-2018 - 16:29 | 07-03-2007 - 20:19 | |
| CVE-2000-1087 | 4.6 |
The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), w
|
12-10-2018 - 21:29 | 09-01-2001 - 05:00 | |
| CVE-2013-2889 | 4.7 |
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a craf
|
09-01-2018 - 02:29 | 16-09-2013 - 13:01 | |
| CVE-2008-4890 | 7.5 |
SQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 04-11-2008 - 00:57 | |
| CVE-2006-5286 | 5.0 |
Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) via unknown attack vectors related to "VPN issues" for certain "IKE and IPsec settings."
|
20-07-2017 - 01:33 | 13-10-2006 - 19:07 | |
| CVE-2006-3888 | 7.5 |
Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long arg
|
20-07-2017 - 01:32 | 10-10-2006 - 23:07 | |
| CVE-2006-3887 | 7.5 |
Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors.
|
20-07-2017 - 01:32 | 10-10-2006 - 23:07 | |
| CVE-2006-5252 | 5.1 |
PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter. Successful exploitation requires that the application is incorr
|
05-09-2008 - 21:11 | 12-10-2006 - 22:07 |