| Max CVSS | 9.4 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-2204 | 1.9 |
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive inf
|
25-03-2019 - 11:33 | 29-06-2011 - 17:55 | |
| CVE-2016-9934 | 5.0 |
ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
|
04-05-2018 - 01:29 | 04-01-2017 - 20:59 | |
| CVE-2007-3107 | 2.1 |
The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to
|
11-10-2017 - 01:32 | 10-07-2007 - 22:30 | |
| CVE-2009-2571 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the URI, (2) the q parameter, (3) the nick parameter, or (4) the nick parameter in a
|
17-08-2017 - 01:30 | 22-07-2009 - 17:30 | |
| CVE-2015-4068 | 9.4 |
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
|
06-12-2016 - 03:02 | 29-05-2015 - 15:59 | |
| CVE-2014-0389 | 4.3 |
Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
|
17-11-2016 - 19:50 | 15-01-2014 - 16:08 | |
| CVE-2005-3015 | 4.3 |
Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters.
|
05-09-2008 - 20:53 | 21-09-2005 - 21:03 | |
| CVE-2002-0965 | 7.5 |
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log
|
05-09-2008 - 20:29 | 04-10-2002 - 04:00 |