Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2018-2432 | 4.9 |
SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnera
|
24-08-2020 - 17:37 | 10-07-2018 - 18:29 | |
CVE-2011-0895 | 4.0 |
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x and 8.1x allows remote authenticated users to obtain sensitive information via unknown vectors.
|
09-10-2019 - 23:02 | 06-04-2011 - 17:55 | |
CVE-2016-7278 | 2.6 |
Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."
|
12-10-2018 - 22:14 | 20-12-2016 - 06:59 | |
CVE-2007-3515 | 10.0 |
SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:29 | 03-07-2007 - 18:30 | |
CVE-2012-3438 | 4.3 |
The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incor
|
29-08-2017 - 01:31 | 07-08-2012 - 21:55 | |
CVE-2011-1548 | 6.3 |
The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of sup
|
21-04-2011 - 02:33 | 30-03-2011 - 22:55 | |
CVE-2009-1484 | 4.3 |
Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this inf
|
29-04-2009 - 18:30 | 29-04-2009 - 18:30 | |
CVE-2005-2809 | 2.1 |
silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file.
|
05-09-2008 - 20:52 | 07-09-2005 - 18:03 | |
CVE-2002-0703 | 7.5 |
An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data.
|
05-09-2008 - 20:28 | 26-07-2002 - 04:00 |