| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-2181 | 5.0 |
The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops
|
27-12-2019 - 16:08 | 16-09-2016 - 05:59 | |
| CVE-2008-2829 | 5.0 |
php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c lega
|
09-10-2019 - 22:55 | 23-06-2008 - 20:41 | |
| CVE-2007-1467 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express
|
16-10-2018 - 16:38 | 16-03-2007 - 21:19 | |
| CVE-2008-2854 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[preloc] parameter to (1) modules/core/logger/init.php and (2) AJAX/newscat.php.
|
29-09-2017 - 01:31 | 25-06-2008 - 12:36 | |
| CVE-2008-6695 | 7.5 |
SQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6692 | 7.5 |
SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6688 | 4.3 |
Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6686 | 7.5 |
SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6698 | 4.3 |
Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6697 | 7.5 |
SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6694 | 7.5 |
SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6696 | 7.5 |
SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2008-6693 | 7.5 |
SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
17-08-2017 - 01:29 | 10-04-2009 - 22:00 | |
| CVE-2005-0992 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2010-3072 | 5.0 |
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request. Per: http://cwe.mitre.org/data/def
|
14-01-2011 - 06:46 | 20-09-2010 - 21:00 | |
| CVE-2008-6338 | 7.5 |
SQL injection vulnerability in the WEBERkommunal Facilities (wes_facilities) extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
02-03-2009 - 05:00 | 27-02-2009 - 17:30 | |
| CVE-2001-0829 | 5.1 |
A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.
|
10-09-2008 - 19:09 | 06-12-2001 - 05:00 |