| Max CVSS | 7.5 | Min CVSS | 3.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-6703 | 7.2 |
Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial of service (insufficient memory allocation) or pos
|
17-01-2023 - 21:45 | 29-06-2016 - 14:10 | |
| CVE-2006-6379 | 7.5 |
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers t
|
09-04-2021 - 18:54 | 10-12-2006 - 19:28 | |
| CVE-2005-3190 | 7.5 |
Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
|
09-04-2021 - 16:56 | 13-10-2005 - 22:02 | |
| CVE-2017-6331 | 3.6 |
Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients.
|
16-09-2020 - 13:15 | 06-11-2017 - 23:29 | |
| CVE-2000-0653 | 5.0 |
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability.
|
12-10-2018 - 21:29 | 20-07-2000 - 04:00 | |
| CVE-2008-6014 | 7.5 |
SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 30-01-2009 - 18:30 | |
| CVE-2005-4677 | 7.5 |
SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php.
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2005-3200 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the sitetitle parameter in header.php and (2) the version and (3) query_count parameter
|
11-07-2017 - 01:33 | 14-10-2005 - 10:02 | |
| CVE-2005-3199 | 7.5 |
Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly via the (1) txtLogin and (2) txtPassword parameters.
|
11-07-2017 - 01:33 | 14-10-2005 - 10:02 | |
| CVE-2005-3201 | 7.5 |
SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.
|
11-07-2017 - 01:33 | 14-10-2005 - 10:02 | |
| CVE-2004-1622 | 7.5 |
SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter.
|
11-07-2017 - 01:31 | 21-10-2004 - 04:00 | |
| CVE-2005-2803 | 4.3 |
Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336.
|
11-11-2008 - 05:53 | 06-09-2005 - 21:03 | |
| CVE-2005-2336 | 4.3 |
Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803.
|
11-11-2008 - 05:51 | 06-09-2005 - 21:03 | |
| CVE-2005-4772 | 6.4 |
liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability t
|
05-09-2008 - 20:57 | 31-12-2005 - 05:00 | |
| CVE-2005-3167 | 4.3 |
Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site sc
|
05-09-2008 - 20:53 | 06-10-2005 - 10:02 |