| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-12613 | 3.6 |
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially r
|
18-04-2022 - 18:16 | 24-10-2017 - 01:29 | |
| CVE-2013-3212 | 6.8 |
vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files and execute local script code.
|
03-02-2020 - 18:52 | 28-01-2020 - 21:15 | |
| CVE-2005-3959 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the (1) site, (2) jsref, (3) jsres, and (4) jscolor parameters to pixel.php, which are not sanitized before
|
19-10-2018 - 15:39 | 01-12-2005 - 06:03 | |
| CVE-2005-3921 | 2.6 |
Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memor
|
19-10-2018 - 15:39 | 30-11-2005 - 11:03 | |
| CVE-2005-3863 | 7.5 |
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to t
|
19-10-2018 - 15:39 | 29-11-2005 - 11:03 | |
| CVE-2005-3961 | 5.0 |
export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter.
|
19-10-2018 - 15:39 | 01-12-2005 - 06:03 | |
| CVE-2005-3949 | 7.5 |
Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid parameter to activity_log.php, (2) startid parameter to admin_handler.php, (3) template parameter to edit_templat
|
19-10-2018 - 15:39 | 01-12-2005 - 06:03 | |
| CVE-2005-3926 | 7.5 |
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via the _SERVER[REMOTE_ADDR] parameter, which is injected into a .inc script
|
19-10-2018 - 15:39 | 30-11-2005 - 11:03 | |
| CVE-2008-5667 | 5.0 |
The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service (memory corruption and application crash) via a malformed RAR archive.
|
29-09-2017 - 01:32 | 19-12-2008 - 01:52 | |
| CVE-2005-4012 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
|
20-07-2017 - 01:29 | 05-12-2005 - 11:03 | |
| CVE-2003-0193 | 2.1 |
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").
|
11-07-2017 - 01:29 | 18-08-2004 - 04:00 | |
| CVE-2005-3850 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.asp in Online Knowledge Base System (OKBSYS) Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the q parameter.
|
08-03-2011 - 02:27 | 27-11-2005 - 11:03 | |
| CVE-2005-3925 | 7.5 |
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) i
|
08-03-2011 - 02:27 | 30-11-2005 - 11:03 | |
| CVE-2005-3851 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.asp in Online Attendance System (OASYS) Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter.
|
08-03-2011 - 02:27 | 27-11-2005 - 11:03 | |
| CVE-2000-0699 | 10.0 |
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 |