| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-3758 | 4.3 |
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contain
|
19-10-2018 - 15:39 | 22-11-2005 - 21:03 | |
| CVE-2005-3757 | 7.5 |
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags
|
19-10-2018 - 15:39 | 22-11-2005 - 21:03 | |
| CVE-2005-3755 | 5.0 |
Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the result
|
19-10-2018 - 15:39 | 22-11-2005 - 21:03 | |
| CVE-2005-3754 | 4.3 |
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which wil
|
19-10-2018 - 15:39 | 22-11-2005 - 21:03 | |
| CVE-2005-3756 | 5.0 |
Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports.
|
19-10-2018 - 15:39 | 22-11-2005 - 21:03 | |
| CVE-2005-3734 | 4.3 |
Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.
|
19-10-2018 - 15:38 | 22-11-2005 - 00:03 | |
| CVE-2012-6524 | 7.5 |
SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-08-2017 - 01:32 | 31-01-2013 - 05:44 | |
| CVE-2005-4323 | 7.8 |
Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial o
|
20-07-2017 - 01:29 | 17-12-2005 - 11:03 | |
| CVE-2004-1492 | 5.0 |
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a large size specifier, which causes a large memory allocation to fail.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1493 | 5.0 |
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2016-0928 | 5.8 |
Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
|
28-11-2016 - 19:56 | 18-09-2016 - 02:59 | |
| CVE-2005-3737 | 5.1 |
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
|
08-03-2011 - 02:27 | 22-11-2005 - 00:03 | |
| CVE-2005-3740 | 7.5 |
Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited parameter to viewforum.php.
|
08-03-2011 - 02:27 | 22-11-2005 - 11:03 | |
| CVE-2005-3742 | 4.3 |
Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter.
|
08-03-2011 - 02:27 | 22-11-2005 - 11:03 | |
| CVE-2000-0705 | 5.0 |
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
|
10-09-2008 - 19:05 | 20-10-2000 - 04:00 | |
| CVE-2005-3741 | 7.5 |
Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.
|
05-09-2008 - 20:55 | 22-11-2005 - 11:03 | |
| CVE-2005-3765 | 7.5 |
Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.
|
05-09-2008 - 20:55 | 22-11-2005 - 23:03 | |
| CVE-2005-3743 | 7.5 |
SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter.
|
05-09-2008 - 20:55 | 22-11-2005 - 11:03 |