| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-1111 | 3.7 |
Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.
|
26-01-2024 - 17:07 | 02-05-2005 - 04:00 | |
| CVE-2017-10346 | 6.8 |
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthen
|
30-07-2022 - 03:36 | 19-10-2017 - 17:29 | |
| CVE-2008-6039 | 6.8 |
Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
|
11-10-2018 - 20:56 | 03-02-2009 - 11:30 | |
| CVE-2010-2629 | 7.5 |
The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allow
|
10-10-2018 - 19:59 | 06-07-2010 - 17:17 | |
| CVE-2010-1575 | 7.5 |
The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete client-supplied ClientCert-* headers, which might allow remote attackers to bypass authentication via
|
10-10-2018 - 19:57 | 06-07-2010 - 17:17 | |
| CVE-2010-1576 | 7.5 |
The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence betwe
|
10-10-2018 - 19:57 | 06-07-2010 - 17:17 | |
| CVE-2006-6203 | 5.0 |
Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
|
19-10-2017 - 01:29 | 01-12-2006 - 01:28 | |
| CVE-2000-0523 | 10.0 |
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command.
|
10-10-2017 - 01:29 | 06-06-2000 - 04:00 | |
| CVE-2005-1114 | 7.5 |
Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2005-1132 | 5.0 |
LG U8120 mobile phone allows remote attackers to cause a denial of service (device crash) via a malformed MIDI file.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2004-0564 | 2.1 |
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "i
|
11-07-2017 - 01:30 | 23-12-2004 - 05:00 | |
| CVE-2005-1115 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.
|
18-10-2016 - 03:17 | 02-05-2005 - 04:00 | |
| CVE-2005-1133 | 5.0 |
The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.
|
18-10-2016 - 03:17 | 02-05-2005 - 04:00 |