| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-1809 | 5.0 |
Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a long filename in an OBEX File Transfer or OBEX Object Push.
|
08-12-2020 - 16:45 | 01-06-2005 - 04:00 | |
| CVE-2005-2090 | 4.3 |
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header
|
15-04-2019 - 16:29 | 05-07-2005 - 04:00 | |
| CVE-2008-4338 | 6.0 |
SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with "access brilliant_gallery" permissions to execut
|
11-10-2018 - 20:51 | 30-09-2008 - 17:22 | |
| CVE-2000-0573 | 10.0 |
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
|
03-05-2018 - 01:29 | 07-07-2000 - 04:00 | |
| CVE-2017-10299 | 4.0 |
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network acc
|
24-10-2017 - 16:58 | 19-10-2017 - 17:29 | |
| CVE-2012-1630 | 2.1 |
Cross-site scripting (XSS) vulnerability in the Taxonomy Navigator module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
|
29-08-2017 - 01:31 | 20-09-2012 - 03:46 | |
| CVE-2012-1629 | 2.1 |
Cross-site scripting (XSS) vulnerability in the Taxotouch module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
|
29-08-2017 - 01:31 | 20-09-2012 - 03:46 | |
| CVE-2016-5734 | 7.5 |
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a craf
|
01-07-2017 - 01:29 | 03-07-2016 - 01:59 | |
| CVE-2005-1905 | 7.2 |
The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs.
|
18-10-2016 - 03:23 | 09-06-2005 - 04:00 | |
| CVE-2005-1884 | 6.4 |
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot dot) in the dir parameter.
|
05-09-2008 - 20:50 | 09-06-2005 - 04:00 | |
| CVE-2005-1886 | 4.3 |
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameters when posting a new comment.
|
05-09-2008 - 20:50 | 09-06-2005 - 04:00 |