| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-3120 | 7.5 |
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
|
02-02-2024 - 14:00 | 17-10-2005 - 20:06 | |
| CVE-2005-4675 | 4.3 |
Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter.
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2005-4674 | 7.5 |
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the (1) c or (2) s parameter.
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2005-3518 | 7.5 |
SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_searches parameter.
|
11-07-2017 - 01:33 | 06-11-2005 - 11:02 | |
| CVE-2004-1634 | 5.0 |
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive in
|
11-07-2017 - 01:31 | 25-10-2004 - 04:00 | |
| CVE-2004-1635 | 5.0 |
Bugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not sufficiently protect private attachments when there are changes to the metadata, such as filename, description, MIME type, or review flags, which allows
|
11-07-2017 - 01:31 | 24-10-2004 - 04:00 | |
| CVE-2014-9903 | 2.1 |
The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain sensitive information from kernel stack memory via a crafted sched_getattr system call.
|
28-11-2016 - 19:15 | 27-06-2016 - 10:59 | |
| CVE-2005-2665 | 7.5 |
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
|
18-10-2016 - 03:29 | 23-08-2005 - 04:00 | |
| CVE-2005-3250 | 2.1 |
Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related to the "/proc" filesystem, which trigger a null dereference.
|
20-07-2013 - 05:20 | 17-10-2005 - 20:06 | |
| CVE-2006-6536 | 6.8 |
Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbitrary web script or HTML via the hata parameter. NOTE: The provenance of this information is unknown; the details are obtained sol
|
05-09-2008 - 21:14 | 14-12-2006 - 02:28 | |
| CVE-2005-3291 | 4.6 |
Stani's Python Editor (SPE) 0.7.5 is installed with world-writable permissions, which allows local users to gain privileges by modifying executable files.
|
05-09-2008 - 20:53 | 23-10-2005 - 10:02 | |
| CVE-2005-3285 | 4.3 |
Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 paramete
|
05-09-2008 - 20:53 | 23-10-2005 - 10:02 | |
| CVE-2000-0748 | 4.6 |
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 |