| Max CVSS | 6.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-3204 | 5.8 |
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Server). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated
|
03-10-2019 - 00:03 | 17-10-2018 - 01:31 | |
| CVE-2002-1094 | 5.0 |
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
|
30-10-2018 - 16:26 | 04-10-2002 - 04:00 | |
| CVE-2005-3929 | 5.0 |
Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php.
|
19-10-2018 - 15:39 | 30-11-2005 - 11:03 | |
| CVE-2017-5515 | 3.5 |
Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names.
|
23-01-2017 - 19:56 | 17-01-2017 - 09:59 | |
| CVE-2012-5453 | 6.5 |
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter. NOTE: this vulnerability exists because of an incomplete fix for
|
11-04-2013 - 03:31 | 22-10-2012 - 23:55 | |
| CVE-2012-5454 | 6.5 |
user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request. NOTE: this might be due to an incomplete fix for CVE-20
|
11-04-2013 - 03:31 | 22-10-2012 - 23:55 | |
| CVE-2012-5551 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the MailChimp module 7.x-2.x before 7.x-2.7 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) a predictable "webhook URL key" and (2) improper sa
|
26-02-2013 - 04:52 | 03-12-2012 - 21:55 |