| Max CVSS | 7.8 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-4643 | 7.1 |
The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.
|
15-08-2023 - 14:41 | 29-10-2012 - 20:55 | |
| CVE-2013-1865 | 6.8 |
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
|
13-02-2023 - 00:28 | 22-03-2013 - 21:55 | |
| CVE-2015-2632 | 5.0 |
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
|
13-05-2022 - 14:38 | 16-07-2015 - 10:59 | |
| CVE-2018-12412 | 6.8 |
The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request for
|
09-10-2019 - 23:33 | 06-11-2018 - 23:29 | |
| CVE-2007-5231 | 4.6 |
Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unaut
|
19-10-2017 - 01:30 | 05-10-2007 - 23:17 | |
| CVE-2007-5230 | 7.5 |
admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE
|
19-10-2017 - 01:30 | 05-10-2007 - 23:17 | |
| CVE-2007-5278 | 4.3 |
Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via
|
29-09-2017 - 01:29 | 08-10-2007 - 23:17 | |
| CVE-2010-3589 | 4.0 |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors rela
|
17-08-2017 - 01:32 | 19-01-2011 - 16:00 | |
| CVE-2016-5876 | 4.3 |
ownCloud server before 8.2.6 and 9.x before 9.0.3, when the gallery app is enabled, allows remote attackers to download arbitrary images via a direct request.
|
01-02-2017 - 02:59 | 23-01-2017 - 21:59 | |
| CVE-2013-1609 | 6.8 |
Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via
|
27-03-2013 - 13:25 | 26-03-2013 - 14:07 | |
| CVE-2005-4257 | 7.8 |
Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND). NOTE: the provenance of this issue is unknown;
|
05-09-2008 - 20:56 | 15-12-2005 - 11:03 | |
| CVE-2002-2180 | 6.8 |
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.
|
05-09-2008 - 20:32 | 31-12-2002 - 05:00 |