| Max CVSS | 9.3 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-1344 | 9.3 |
Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the (1) urlParse function, which causes a stack-based overflow and the (2) Replace
|
12-07-2021 - 17:11 | 08-03-2007 - 22:19 | |
| CVE-2008-1546 | 7.8 |
servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service (air-conditioning outage) via an XML document containing a setRequest comm
|
11-10-2018 - 20:35 | 28-03-2008 - 23:44 | |
| CVE-2008-1499 | 4.3 |
Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string.
|
11-10-2018 - 20:35 | 25-03-2008 - 19:44 | |
| CVE-2001-0763 | 7.5 |
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.
|
03-05-2018 - 01:29 | 18-10-2001 - 04:00 | |
| CVE-2018-6191 | 4.3 |
The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation.
|
09-02-2018 - 18:10 | 24-01-2018 - 21:29 | |
| CVE-2008-6906 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username.
|
29-09-2017 - 01:33 | 06-08-2009 - 17:30 | |
| CVE-2008-1591 | 7.5 |
The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with se
|
29-09-2017 - 01:30 | 31-03-2008 - 23:44 | |
| CVE-2008-1509 | 7.5 |
SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the query parameter.
|
29-09-2017 - 01:30 | 25-03-2008 - 23:44 | |
| CVE-2008-1505 | 7.5 |
PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php.
|
29-09-2017 - 01:30 | 25-03-2008 - 19:44 | |
| CVE-2012-1979 | 3.5 |
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration act
|
29-08-2017 - 01:31 | 17-04-2012 - 18:55 | |
| CVE-2008-1500 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. NOTE: the provenance of this information is unknown; the details are obta
|
08-08-2017 - 01:30 | 25-03-2008 - 19:44 | |
| CVE-2016-0331 | 3.5 |
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web scri
|
30-07-2017 - 01:29 | 12-09-2016 - 10:59 | |
| CVE-2005-0807 | 7.5 |
Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniff
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2015-2092 | 7.5 |
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."
|
28-11-2016 - 19:19 | 09-03-2015 - 14:59 | |
| CVE-2008-1511 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for (1) classes/class_admin.php and (2) classes/class_comments.php. NOTE: the provenan
|
05-09-2008 - 04:00 | 25-03-2008 - 23:44 |