| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-9087 | 7.5 |
Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer
|
18-05-2023 - 18:08 | 01-12-2014 - 15:59 | |
| CVE-2008-3661 | 5.0 |
Drupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
|
21-04-2021 - 12:59 | 23-09-2008 - 15:25 | |
| CVE-2017-15286 | 5.0 |
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
|
27-10-2017 - 14:18 | 12-10-2017 - 08:29 | |
| CVE-2005-0859 | 7.5 |
PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to (1) headlines.php or (2) news.php. NOTE: some sources have reported the "dir" parameter as being affected; how
|
19-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2005-0847 | 5.0 |
Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections.
|
19-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2004-0967 | 7.2 |
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary fi
|
11-10-2017 - 01:29 | 09-02-2005 - 05:00 | |
| CVE-2000-0488 | 10.0 |
Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.
|
10-10-2017 - 01:29 | 30-05-2000 - 04:00 | |
| CVE-2012-5103 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) message parameter.
|
29-08-2017 - 01:32 | 23-09-2012 - 17:55 | |
| CVE-2006-6127 | 2.1 |
Apple Mac OS X kernel allows local users to cause a denial of service via a process that uses kevent to register a queue and an event, then fork a child process that uses kevent to register an event for the same queue as the parent.
|
29-07-2017 - 01:29 | 27-11-2006 - 00:07 | |
| CVE-2005-0858 | 7.5 |
Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to entete.php or (2) the login parameter to register.php.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-0857 | 4.3 |
Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-0826 | 5.0 |
OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a long filename.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2004-2769 | 4.0 |
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
|
06-07-2010 - 04:00 | 02-07-2010 - 20:30 | |
| CVE-2005-0860 | 7.5 |
PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php, (2) authorall.php, (3) comment.php, (4) display.php, or (5) displayall.php.
|
05-09-2008 - 20:47 | 02-05-2005 - 04:00 |