| Max CVSS | 7.5 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-3745 | 4.3 |
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler genera
|
08-12-2020 - 05:15 | 22-11-2005 - 11:03 | |
| CVE-2005-3747 | 5.0 |
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758
|
19-10-2018 - 15:39 | 22-11-2005 - 11:03 | |
| CVE-2005-3632 | 4.6 |
Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file.
|
03-10-2018 - 21:33 | 21-11-2005 - 22:03 | |
| CVE-2010-2852 | 2.6 |
Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter.
|
17-08-2017 - 01:32 | 25-07-2010 - 02:04 | |
| CVE-2005-3746 | 7.5 |
SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter.
|
11-07-2017 - 01:33 | 22-11-2005 - 11:03 | |
| CVE-2004-2594 | 5.0 |
Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg".
|
11-07-2017 - 01:32 | 31-12-2004 - 05:00 | |
| CVE-2004-2593 | 7.5 |
Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer.
|
11-07-2017 - 01:32 | 31-12-2004 - 05:00 | |
| CVE-2004-2597 | 5.0 |
Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be
|
11-07-2017 - 01:32 | 31-12-2004 - 05:00 | |
| CVE-2004-2592 | 5.0 |
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that asks the server to send data stored at a negative array offset, which is not handled when p
|
11-07-2017 - 01:32 | 31-12-2004 - 05:00 | |
| CVE-2004-2596 | 5.0 |
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address.
|
11-07-2017 - 01:32 | 31-12-2004 - 05:00 | |
| CVE-2004-2595 | 5.0 |
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the a
|
11-07-2017 - 01:32 | 31-12-2004 - 05:00 | |
| CVE-2016-2870 | 5.0 |
Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors.
|
28-11-2016 - 20:05 | 02-07-2016 - 14:59 | |
| CVE-2005-3748 | 7.5 |
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter.
|
05-08-2011 - 04:00 | 22-11-2005 - 11:03 | |
| CVE-2005-3744 | 7.5 |
SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handle
|
05-08-2011 - 04:00 | 22-11-2005 - 11:03 | |
| CVE-2005-3735 | 7.5 |
Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafr
|
08-03-2011 - 02:27 | 22-11-2005 - 00:03 | |
| CVE-2000-0714 | 7.2 |
umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.
|
10-09-2008 - 19:05 | 20-10-2000 - 04:00 | |
| CVE-2005-3769 | 7.5 |
SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.
|
05-09-2008 - 20:55 | 23-11-2005 - 00:03 | |
| CVE-2004-2598 | 5.0 |
Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notifie
|
05-09-2008 - 20:44 | 31-12-2004 - 05:00 |