| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-12626 | 5.0 |
Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294), and 2) Out of Memory Exceptions while parsing crafted DOC, PPT and
|
14-06-2021 - 18:15 | 29-01-2018 - 17:29 | |
| CVE-2007-1362 | 4.3 |
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter w
|
16-10-2018 - 16:38 | 01-06-2007 - 00:30 | |
| CVE-2008-1914 | 10.0 |
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained f
|
11-10-2018 - 20:37 | 22-04-2008 - 04:41 | |
| CVE-2008-1912 | 9.3 |
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long subtitle in a .SRT file.
|
11-10-2018 - 20:37 | 22-04-2008 - 04:41 | |
| CVE-2015-2102 | 7.5 |
SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL commands via the item parameter.
|
09-10-2018 - 19:56 | 27-02-2015 - 15:59 | |
| CVE-2001-0820 | 7.5 |
Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
|
19-12-2017 - 02:29 | 06-12-2001 - 05:00 | |
| CVE-2012-1672 | 7.5 |
SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter.
|
29-08-2017 - 01:31 | 11-04-2012 - 10:39 | |
| CVE-2016-3866 | 9.3 |
The Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28868303 and Qualcomm internal bug CR1032820.
|
13-08-2017 - 01:29 | 11-09-2016 - 21:59 | |
| CVE-2008-4911 | 7.5 |
PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute arbitrary PHP code via a URL in the data parameter.
|
08-08-2017 - 01:32 | 04-11-2008 - 00:57 | |
| CVE-2008-1833 | 7.5 |
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.
|
08-08-2017 - 01:30 | 16-04-2008 - 15:05 | |
| CVE-2008-1850 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbitrary web script or HTML via the (1) login, (2) profile, (3) profile2, and (4) ref parameters.
|
08-08-2017 - 01:30 | 16-04-2008 - 17:05 | |
| CVE-2008-1893 | 7.5 |
PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter.
|
08-08-2017 - 01:30 | 18-04-2008 - 22:05 | |
| CVE-2005-0881 | 4.3 |
Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter.
|
11-07-2017 - 01:32 | 23-03-2005 - 05:00 | |
| CVE-2008-4218 | 7.2 |
Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2) i386_get_ldt.
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-6567 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via (1) the e-mail address, (2) a comment, which is not properly handled during moderation, and (3) the tag p
|
31-03-2009 - 17:30 | 31-03-2009 - 17:30 |