| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-15671 | 4.3 |
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (mem
|
03-10-2019 - 00:03 | 20-10-2017 - 17:29 | |
| CVE-2005-3319 | 2.1 |
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file
|
30-10-2018 - 16:25 | 27-10-2005 - 10:02 | |
| CVE-2010-2858 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters.
|
10-10-2018 - 20:00 | 25-07-2010 - 02:04 | |
| CVE-2005-3088 | 2.1 |
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords.
|
03-10-2018 - 21:31 | 27-10-2005 - 10:02 | |
| CVE-2008-4455 | 6.8 |
Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the language cookie.
|
19-10-2017 - 01:30 | 06-10-2008 - 23:25 | |
| CVE-2005-4656 | 5.0 |
SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands, and retrieve all usernames and passwords, via the id parameter.
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2004-2640 | 5.0 |
Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.
|
20-07-2017 - 01:29 | 31-12-2004 - 05:00 | |
| CVE-2005-3333 | 7.5 |
SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
|
11-07-2017 - 01:33 | 27-10-2005 - 10:02 | |
| CVE-2005-3304 | 7.5 |
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the des
|
11-07-2017 - 01:33 | 26-10-2005 - 01:02 | |
| CVE-2005-3310 | 3.5 |
Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG file extension, which causes the HTML to be execut
|
11-07-2017 - 01:33 | 26-10-2005 - 01:02 | |
| CVE-2016-2945 | 6.0 |
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
|
28-11-2016 - 20:05 | 08-07-2016 - 01:59 | |
| CVE-2005-3364 | 7.5 |
Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools
|
18-10-2016 - 03:34 | 30-10-2005 - 14:34 | |
| CVE-2005-3307 | 5.0 |
Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via ".." sequences in the (1) user parameter in a profile operation or (2) quale parameter in a newtopic operation.
|
18-10-2016 - 03:34 | 26-10-2005 - 01:02 | |
| CVE-2005-3328 | 7.5 |
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter.
|
18-10-2016 - 03:34 | 27-10-2005 - 10:02 | |
| CVE-2000-0683 | 5.0 |
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 |