| Max CVSS | 7.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-20339 | 4.3 |
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section.
|
04-05-2021 - 15:07 | 21-12-2018 - 09:29 | |
| CVE-2018-20338 | 7.5 |
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.
|
04-05-2021 - 15:07 | 21-12-2018 - 09:29 | |
| CVE-2012-4195 | 4.3 |
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and prin
|
12-08-2020 - 14:39 | 29-10-2012 - 18:55 | |
| CVE-2007-5822 | 7.5 |
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the regi
|
15-10-2018 - 21:46 | 05-11-2007 - 19:46 | |
| CVE-2014-2588 | 4.0 |
Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter.
|
29-08-2017 - 01:34 | 24-03-2014 - 16:38 | |
| CVE-2014-2587 | 6.5 |
SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).
|
29-08-2017 - 01:34 | 24-03-2014 - 16:38 | |
| CVE-2010-4745 | 4.3 |
Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
|
17-08-2017 - 01:33 | 21-02-2011 - 19:00 | |
| CVE-2002-1341 | 6.8 |
Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.
|
11-07-2017 - 01:29 | 18-12-2002 - 05:00 | |
| CVE-2014-2586 | 4.3 |
Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbitrary web script or HTML via a crafted password.
|
24-03-2014 - 22:15 | 24-03-2014 - 16:38 | |
| CVE-2006-0373 | 4.3 |
Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained so
|
05-09-2008 - 20:59 | 22-01-2006 - 20:03 |