| Max CVSS | 10.0 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-4172 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to s
|
13-02-2023 - 04:28 | 26-11-2010 - 20:00 | |
| CVE-2017-1476 | 4.3 |
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could ex
|
09-10-2019 - 23:26 | 06-06-2018 - 17:29 | |
| CVE-2010-4242 | 4.0 |
The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of servic
|
10-10-2018 - 20:07 | 11-01-2011 - 03:00 | |
| CVE-2009-0892 | 5.5 |
The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessions in "specific scenarios" related to a forced logout.
|
17-08-2017 - 01:30 | 31-03-2009 - 14:09 | |
| CVE-2016-9119 | 4.3 |
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
03-02-2017 - 15:59 | 30-01-2017 - 22:59 | |
| CVE-2012-1745 | 5.0 |
Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect availability via unknown vectors.
|
11-10-2013 - 03:42 | 17-07-2012 - 22:55 | |
| CVE-2002-0525 | 10.0 |
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
|
05-09-2008 - 20:28 | 12-08-2002 - 04:00 |