| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-0920 | 7.5 |
Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.
|
10-10-2018 - 19:32 | 25-03-2009 - 01:30 | |
| CVE-2007-3077 | 7.5 |
SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter.
|
11-10-2017 - 01:32 | 06-06-2007 - 10:30 | |
| CVE-2005-2330 | 5.0 |
Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.
|
11-07-2017 - 01:32 | 20-07-2005 - 04:00 | |
| CVE-2016-9296 | 5.0 |
A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z
|
29-11-2016 - 18:03 | 12-11-2016 - 02:59 | |
| CVE-2002-0560 | 5.0 |
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns.
|
18-10-2016 - 02:20 | 03-07-2002 - 04:00 | |
| CVE-2010-4890 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
14-05-2012 - 04:00 | 07-10-2011 - 10:55 | |
| CVE-2010-4891 | 7.5 |
SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
14-05-2012 - 04:00 | 07-10-2011 - 10:55 | |
| CVE-2010-4886 | 4.3 |
Cross-site scripting (XSS) vulnerability in the "official twitter tweet button for your page" (tweetbutton) extension before 1.0.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
14-05-2012 - 04:00 | 07-10-2011 - 10:55 | |
| CVE-2010-4877 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter.
|
14-02-2012 - 04:02 | 07-10-2011 - 10:55 |