| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-12171 | 6.4 |
A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a res
|
12-02-2023 - 23:27 | 26-07-2018 - 17:29 | |
| CVE-2012-0492 | 2.1 |
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012
|
17-12-2019 - 20:23 | 18-01-2012 - 22:55 | |
| CVE-2005-2926 | 4.6 |
Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.
|
09-10-2019 - 22:48 | 25-10-2005 - 16:02 | |
| CVE-2006-6519 | 7.5 |
SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter.
|
17-10-2018 - 21:49 | 14-12-2006 - 01:28 | |
| CVE-2006-6518 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) date, (4) sujet, (5) message, (6) site, and (7) lien parameters to (a) admin/change.ph
|
17-10-2018 - 21:49 | 14-12-2006 - 01:28 | |
| CVE-2008-4483 | 6.8 |
Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter.
|
29-09-2017 - 01:32 | 08-10-2008 - 02:00 | |
| CVE-2005-4653 | 5.0 |
Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a cookie_username=admin argument.
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2005-3308 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) comment parameter in detail.php, (3) the username parameter in get.php, and (4) the search parame
|
11-07-2017 - 01:33 | 26-10-2005 - 01:02 | |
| CVE-2005-3436 | 4.3 |
Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search module, (2) certain edit fields in Guestbook, (3) the title in the Forum module, and (4) Textbox.
|
11-07-2017 - 01:33 | 02-11-2005 - 11:02 | |
| CVE-2005-3300 | 5.0 |
The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct request
|
11-07-2017 - 01:33 | 23-10-2005 - 21:02 | |
| CVE-2004-1632 | 4.3 |
Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php.
|
11-07-2017 - 01:31 | 25-10-2004 - 04:00 | |
| CVE-2013-5002 | 3.5 |
Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumbe
|
31-12-2016 - 02:59 | 31-07-2013 - 13:20 | |
| CVE-2005-3311 | 2.1 |
BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
|
18-10-2016 - 03:34 | 26-10-2005 - 01:02 | |
| CVE-2000-0786 | 4.6 |
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions.
|
18-10-2016 - 02:07 | 20-10-2000 - 04:00 | |
| CVE-2005-3283 | 4.3 |
Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
|
24-10-2012 - 04:00 | 23-10-2005 - 10:02 | |
| CVE-2005-3317 | 7.5 |
Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly
|
25-03-2009 - 04:00 | 27-10-2005 - 10:02 | |
| CVE-2005-3322 | 5.0 |
Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL).
|
10-09-2008 - 19:46 | 27-10-2005 - 10:02 |