| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-0814 | 3.5 |
The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these m
|
13-02-2023 - 03:26 | 27-01-2012 - 19:55 | |
| CVE-2012-0053 | 4.3 |
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors i
|
14-09-2022 - 19:51 | 28-01-2012 - 04:05 | |
| CVE-2016-9941 | 7.5 |
Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message containing a subr
|
23-10-2020 - 13:15 | 31-12-2016 - 18:59 | |
| CVE-2016-9942 | 7.5 |
Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type
|
23-10-2020 - 13:15 | 31-12-2016 - 18:59 | |
| CVE-2018-7795 | 4.3 |
A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manip
|
07-11-2018 - 19:09 | 29-08-2018 - 20:29 | |
| CVE-2007-4229 | 4.3 |
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service (failed assertion and application crash) via certain malformed HTML, as demonstrated by a document containing TEXTAREA, BUTTON, BR, BDO,
|
15-10-2018 - 21:34 | 08-08-2007 - 22:17 | |
| CVE-2012-0941 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Endpoint Monitor, (2) Dialup List
|
27-02-2018 - 19:44 | 08-02-2018 - 23:29 | |
| CVE-2012-5227 | 7.5 |
SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-08-2017 - 01:32 | 01-10-2012 - 20:55 | |
| CVE-2012-5232 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Quickl Form component for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
29-08-2017 - 01:32 | 01-10-2012 - 20:55 | |
| CVE-2012-5226 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) motclef parameter to achat/recherche.php or (2) PATH_INFO to index.php.
|
29-08-2017 - 01:32 | 01-10-2012 - 20:55 | |
| CVE-2009-0896 | 10.0 |
Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request.
|
17-08-2017 - 01:30 | 03-06-2009 - 17:00 | |
| CVE-2005-3310 | 3.5 |
Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG file extension, which causes the HTML to be execut
|
11-07-2017 - 01:33 | 26-10-2005 - 01:02 | |
| CVE-2012-0813 | 2.1 |
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
|
01-08-2012 - 04:00 | 29-06-2012 - 19:55 | |
| CVE-2002-2195 | 5.0 |
Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.
|
05-09-2008 - 20:32 | 31-12-2002 - 05:00 |