| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-4608 | 7.5 |
mod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sess
|
13-02-2023 - 03:23 | 27-01-2012 - 15:55 | |
| CVE-2017-15085 | 4.3 |
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
|
12-02-2023 - 23:28 | 08-11-2017 - 19:29 | |
| CVE-2005-3952 | 7.5 |
SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affecte
|
19-10-2018 - 15:39 | 01-12-2005 - 06:03 | |
| CVE-2000-0696 | 7.5 |
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CG
|
19-12-2017 - 02:29 | 20-10-2000 - 04:00 | |
| CVE-2008-4531 | 7.5 |
SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries. NOTE: this might be the same issue as CVE-2008-4338.
|
08-08-2017 - 01:32 | 09-10-2008 - 18:14 | |
| CVE-2008-4530 | 3.5 |
Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers.
|
08-08-2017 - 01:32 | 09-10-2008 - 18:14 | |
| CVE-2005-4253 | 4.3 |
Cross-site scripting (XSS) vulnerability in getdox.php in Torrential 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL. NOTE: this might be resultant from CVE-2005-4160.
|
20-07-2017 - 01:29 | 15-12-2005 - 11:03 | |
| CVE-2016-5230 | 6.8 |
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and control partial module functions via a crafted app.
|
28-11-2016 - 20:23 | 30-06-2016 - 16:59 | |
| CVE-2005-3916 | 7.5 |
SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action.
|
08-03-2011 - 02:27 | 30-11-2005 - 11:03 | |
| CVE-2005-3785 | 5.0 |
Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program.
|
08-03-2011 - 02:27 | 23-11-2005 - 23:03 | |
| CVE-2005-3833 | 7.5 |
SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter.
|
08-03-2011 - 02:27 | 26-11-2005 - 20:03 | |
| CVE-2005-3855 | 7.5 |
SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter.
|
08-03-2011 - 02:27 | 27-11-2005 - 11:03 | |
| CVE-2005-3834 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.
|
08-03-2011 - 02:27 | 26-11-2005 - 20:03 | |
| CVE-2005-3786 | 4.6 |
Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.
|
08-03-2011 - 02:27 | 23-11-2005 - 23:03 | |
| CVE-2005-3841 | 4.3 |
Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.
|
08-03-2011 - 02:27 | 26-11-2005 - 22:03 | |
| CVE-2005-3914 | 6.4 |
Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemInfo.php and (3) ItemReview.php.
|
08-03-2011 - 02:27 | 30-11-2005 - 11:03 |