| Max CVSS | 7.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-3832 | 4.9 |
A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of service (NULL pointer dereference and system crash or hang) via a call to
|
13-02-2023 - 02:19 | 03-10-2008 - 17:41 | |
| CVE-2016-5729 | 6.8 |
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode (SMM) privileges via unspecified vectors.
|
27-09-2019 - 17:12 | 30-06-2016 - 16:59 | |
| CVE-2005-2709 | 4.6 |
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unreg
|
19-10-2018 - 15:33 | 20-11-2005 - 22:03 | |
| CVE-2005-3565 | 7.5 |
Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows remote attackers to gain unauthorized system access via unknown attack vectors.
|
11-10-2017 - 01:30 | 16-11-2005 - 07:42 | |
| CVE-2000-0740 | 5.0 |
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.
|
10-10-2017 - 01:29 | 20-10-2000 - 04:00 | |
| CVE-2013-4911 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC
|
29-08-2017 - 01:33 | 01-08-2013 - 13:32 | |
| CVE-2005-4426 | 4.0 |
Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer
|
20-07-2017 - 01:29 | 20-12-2005 - 11:03 | |
| CVE-2005-3635 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTE
|
11-07-2017 - 01:33 | 16-11-2005 - 21:22 | |
| CVE-2005-3567 | 5.8 |
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.
|
11-07-2017 - 01:33 | 16-11-2005 - 07:42 | |
| CVE-2005-3596 | 7.5 |
SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.
|
11-07-2017 - 01:33 | 16-11-2005 - 07:42 | |
| CVE-2005-3636 | 4.3 |
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.
|
11-07-2017 - 01:33 | 16-11-2005 - 21:22 | |
| CVE-2005-3633 | 5.0 |
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
|
11-07-2017 - 01:33 | 16-11-2005 - 21:22 | |
| CVE-2005-3678 | 5.0 |
Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service (connection reset) via email with a blank sender.
|
11-07-2017 - 01:33 | 18-11-2005 - 23:03 | |
| CVE-2005-3634 | 5.0 |
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl p
|
11-07-2017 - 01:33 | 16-11-2005 - 21:22 | |
| CVE-2005-3354 | 5.1 |
Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines.
|
11-07-2017 - 01:33 | 20-11-2005 - 21:03 |