| Max CVSS | 9.3 | Min CVSS | 4.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-3525 | 5.8 |
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
|
13-02-2023 - 04:34 | 25-08-2012 - 16:55 | |
| CVE-2018-6055 | 6.8 |
Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page.
|
20-11-2018 - 16:33 | 25-09-2018 - 14:29 | |
| CVE-2007-4740 | 9.3 |
The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method.
|
15-10-2018 - 21:37 | 06-09-2007 - 19:17 | |
| CVE-2009-2361 | 7.5 |
SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter.
|
10-10-2018 - 19:39 | 08-07-2009 - 15:30 | |
| CVE-2016-8316 | 4.9 |
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allow
|
11-02-2017 - 02:59 | 27-01-2017 - 22:59 | |
| CVE-2015-5453 | 6.5 |
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl.
|
28-11-2016 - 19:33 | 08-07-2015 - 15:59 | |
| CVE-2015-5452 | 7.5 |
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.
|
28-11-2016 - 19:33 | 08-07-2015 - 15:59 | |
| CVE-2003-0154 | 6.8 |
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various p
|
18-10-2016 - 02:30 | 02-04-2003 - 05:00 | |
| CVE-2014-0727 | 7.5 |
SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318.
|
16-09-2015 - 18:57 | 13-02-2014 - 05:24 |