| Max CVSS | 10.0 | Min CVSS | 1.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-2816 | 7.8 |
Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote attackers to cause a denial of se
|
11-08-2023 - 19:03 | 09-08-2010 - 11:58 | |
| CVE-2006-6336 | 10.0 |
Heap-based buffer overflow in the Mail Management Server (MAILMA.exe) in Eudora WorldMail 3.1.x allows remote attackers to execute arbitrary code via a crafted request containing successive delimiters.
|
17-10-2018 - 21:47 | 31-12-2006 - 05:00 | |
| CVE-2007-0497 | 6.8 |
PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter.
|
16-10-2018 - 16:33 | 25-01-2007 - 21:28 | |
| CVE-2007-0119 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi.
|
16-10-2018 - 16:31 | 09-01-2007 - 02:28 | |
| CVE-2007-0118 | 4.3 |
Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.
|
16-10-2018 - 16:31 | 09-01-2007 - 02:28 | |
| CVE-2007-0106 | 6.8 |
Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable
|
16-10-2018 - 16:31 | 09-01-2007 - 00:28 | |
| CVE-2007-0124 | 3.5 |
Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors
|
16-10-2018 - 16:31 | 09-01-2007 - 02:28 | |
| CVE-2007-0122 | 6.5 |
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.p
|
16-10-2018 - 16:31 | 09-01-2007 - 02:28 | |
| CVE-2008-6508 | 7.5 |
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings
|
11-10-2018 - 20:57 | 23-03-2009 - 20:00 | |
| CVE-2008-6509 | 7.5 |
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp.
|
11-10-2018 - 20:57 | 23-03-2009 - 20:00 | |
| CVE-2008-6510 | 4.3 |
Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url parameter.
|
11-10-2018 - 20:57 | 23-03-2009 - 20:00 | |
| CVE-2012-0316 | 5.0 |
The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
|
11-01-2018 - 02:29 | 02-03-2012 - 00:55 | |
| CVE-2007-0120 | 1.9 |
Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-Length values.
|
19-10-2017 - 01:29 | 09-01-2007 - 02:28 | |
| CVE-2001-0138 | 1.2 |
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
|
10-10-2017 - 01:29 | 12-03-2001 - 05:00 | |
| CVE-2015-0376 | 4.3 |
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Content Server.
|
29-06-2016 - 15:06 | 21-01-2015 - 18:59 | |
| CVE-2007-0117 | 10.0 |
DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file per
|
08-03-2011 - 02:48 | 09-01-2007 - 02:28 |