| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-1000410 | 5.0 |
The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned
|
08-04-2019 - 20:29 | 07-12-2017 - 19:29 | |
| CVE-2006-2431 | 4.3 |
Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitr
|
18-10-2018 - 16:39 | 17-05-2006 - 10:06 | |
| CVE-2006-5886 | 7.5 |
SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.
|
17-10-2018 - 21:45 | 14-11-2006 - 22:07 | |
| CVE-2006-5885 | 7.5 |
SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID parameter.
|
17-10-2018 - 21:45 | 14-11-2006 - 22:07 | |
| CVE-2006-5881 | 7.5 |
SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute arbitrary SQL commands via the cl_cat_ID parameter.
|
17-10-2018 - 21:45 | 14-11-2006 - 19:07 | |
| CVE-2006-5461 | 2.1 |
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
|
03-10-2018 - 21:45 | 14-11-2006 - 22:07 | |
| CVE-2001-0023 | 10.0 |
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.
|
19-12-2017 - 02:29 | 12-02-2001 - 05:00 | |
| CVE-2006-5893 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) mysql.php and (2) mysqli.php in include/classes/pear/DB/.
|
19-10-2017 - 01:29 | 14-11-2006 - 22:07 | |
| CVE-2007-0355 | 7.2 |
Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request w
|
19-10-2017 - 01:29 | 19-01-2007 - 01:28 | |
| CVE-2004-1234 | 2.1 |
load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL.
|
11-10-2017 - 01:29 | 31-12-2004 - 05:00 | |
| CVE-2015-1200 | 2.1 |
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
|
08-09-2017 - 01:29 | 23-01-2015 - 15:59 | |
| CVE-2012-1289 | 4.0 |
Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (c
|
29-08-2017 - 01:31 | 23-02-2012 - 20:07 | |
| CVE-2008-6504 | 5.0 |
ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Obje
|
17-08-2017 - 01:29 | 23-03-2009 - 14:19 | |
| CVE-2006-7155 | 7.5 |
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-52
|
29-07-2017 - 01:29 | 07-03-2007 - 20:19 | |
| CVE-2016-6253 | 7.2 |
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
|
20-01-2017 - 19:58 | 20-01-2017 - 15:59 | |
| CVE-2012-1292 | 5.0 |
Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the MessagingSystem Performance Data via unspecified vectors.
|
27-02-2012 - 05:00 | 23-02-2012 - 20:07 | |
| CVE-2012-1290 | 4.3 |
Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm.b2b) module in SAP NetWeaver 7.0 allows remote attackers to inject arbitrary web script or HTML via the _loadPage parameter.
|
24-02-2012 - 05:00 | 23-02-2012 - 20:07 | |
| CVE-2012-1291 | 5.0 |
Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerSer
|
24-02-2012 - 05:00 | 23-02-2012 - 20:07 |