| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0517 | 7.5 |
Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id_forum, (2) id_article, or (3) id_br
|
19-10-2018 - 15:45 | 02-02-2006 - 11:02 | |
| CVE-2002-1643 | 7.5 |
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two
|
23-12-2017 - 02:29 | 19-12-2002 - 05:00 | |
| CVE-2012-4853 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for reque
|
29-08-2017 - 01:32 | 14-11-2012 - 12:30 | |
| CVE-2017-2682 | 6.8 |
The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the ta
|
17-07-2017 - 13:18 | 27-02-2017 - 11:59 | |
| CVE-2013-7240 | 5.0 |
Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dew_file parameter.
|
25-02-2014 - 13:18 | 03-01-2014 - 18:54 | |
| CVE-2011-1005 | 5.0 |
The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.
|
13-08-2013 - 17:00 | 02-03-2011 - 20:00 | |
| CVE-2007-6090 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely fro
|
05-09-2008 - 21:32 | 22-11-2007 - 00:46 |