| Max CVSS | 8.5 | Min CVSS | 3.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-0339 | 6.8 |
libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote attackers to cause a denial of service (resource cons
|
13-02-2023 - 04:41 | 21-01-2014 - 18:55 | |
| CVE-2013-1915 | 7.5 |
ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference
|
12-02-2021 - 17:27 | 25-04-2013 - 23:55 | |
| CVE-2012-6139 | 5.0 |
libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFuncti
|
30-10-2018 - 16:27 | 12-04-2013 - 22:55 | |
| CVE-2013-2266 | 7.8 |
libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as
|
30-10-2018 - 16:27 | 28-03-2013 - 16:55 | |
| CVE-2013-0338 | 4.3 |
libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entit
|
30-10-2018 - 16:27 | 25-04-2013 - 23:55 | |
| CVE-2013-1900 | 8.5 |
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors relat
|
20-10-2017 - 01:29 | 04-04-2013 - 17:55 | |
| CVE-2003-0153 | 5.0 |
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
|
11-07-2017 - 01:29 | 02-04-2003 - 05:00 | |
| CVE-2003-0154 | 6.8 |
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various p
|
18-10-2016 - 02:30 | 02-04-2003 - 05:00 | |
| CVE-2013-1899 | 6.5 |
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration setti
|
01-12-2013 - 04:27 | 04-04-2013 - 17:55 | |
| CVE-2013-1901 | 4.0 |
PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions. Pe
|
01-12-2013 - 04:27 | 04-04-2013 - 17:55 | |
| CVE-2012-6096 | 7.5 |
Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long
|
05-06-2013 - 03:40 | 22-01-2013 - 23:55 | |
| CVE-2013-1766 | 3.6 |
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
|
21-03-2013 - 16:34 | 20-03-2013 - 15:55 | |
| CVE-2003-0152 | 7.5 |
Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
|
05-09-2008 - 20:33 | 02-04-2003 - 05:00 | |
| CVE-2003-0155 | 5.0 |
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
|
05-09-2008 - 20:33 | 02-04-2003 - 05:00 |