| Max CVSS | 7.8 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-3985 | 4.3 |
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
23-07-2021 - 12:55 | 26-10-2010 - 19:00 | |
| CVE-2017-13754 | 3.5 |
Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.
|
09-10-2018 - 20:01 | 07-09-2017 - 13:29 | |
| CVE-2002-1639 | 7.5 |
Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".
|
26-09-2018 - 16:05 | 01-04-2002 - 05:00 | |
| CVE-2009-1499 | 7.5 |
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the ven
|
29-09-2017 - 01:34 | 01-05-2009 - 16:30 | |
| CVE-2010-1693 | 6.3 |
openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.
|
17-08-2017 - 01:32 | 26-10-2010 - 19:00 | |
| CVE-2010-3350 | 6.9 |
bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
|
17-08-2017 - 01:32 | 20-10-2010 - 18:00 | |
| CVE-2007-3185 | 7.8 |
Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that trigger memory corruption, as demonstrated using Hamachi.
|
29-07-2017 - 01:32 | 12-06-2007 - 22:30 | |
| CVE-2005-4813 | 5.0 |
Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of ser
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2015-3395 | 6.8 |
The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via
|
01-07-2017 - 01:29 | 16-06-2015 - 16:59 | |
| CVE-2016-4670 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "Security" component. It allows local users to discover lengths of arbitrary passwords by reading a log.
|
21-02-2017 - 23:46 | 20-02-2017 - 08:59 | |
| CVE-2010-3351 | 6.9 |
startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
|
15-09-2011 - 03:16 | 20-10-2010 - 18:00 | |
| CVE-2010-3991 | 4.3 |
Cross-site scripting (XSS) vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
11-11-2010 - 06:50 | 28-10-2010 - 20:00 |