| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4279 | 6.8 |
The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231;
|
02-11-2018 - 13:06 | 06-10-2008 - 19:54 | |
| CVE-2005-4081 | 7.5 |
Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pa
|
19-10-2018 - 15:40 | 08-12-2005 - 01:03 | |
| CVE-2005-3996 | 5.1 |
SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter.
|
19-10-2018 - 15:39 | 05-12-2005 - 00:03 | |
| CVE-2005-3995 | 5.1 |
Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when the syslog (-S) function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name
|
19-10-2018 - 15:39 | 05-12-2005 - 00:03 | |
| CVE-2016-3241 | 7.6 |
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability tha
|
12-10-2018 - 22:12 | 13-07-2016 - 01:59 | |
| CVE-2008-4278 | 2.1 |
VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password.
|
11-10-2018 - 20:51 | 06-10-2008 - 19:54 | |
| CVE-2006-6547 | 4.3 |
Buffer overflow in the readAA function in read_aa.cpp in Winamp iPod Plugin (ml_ipod) 2.00 p19 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long tag in an audible.com audiobook (
|
29-07-2017 - 01:29 | 14-12-2006 - 18:28 | |
| CVE-2004-2669 | 7.5 |
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername
|
29-07-2017 - 01:29 | 31-12-2004 - 05:00 | |
| CVE-2005-3999 | 4.3 |
Cross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
|
20-07-2017 - 01:29 | 05-12-2005 - 00:03 | |
| CVE-2005-4000 | 4.3 |
Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter.
|
20-07-2017 - 01:29 | 05-12-2005 - 00:03 | |
| CVE-2005-3998 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
|
20-07-2017 - 01:29 | 05-12-2005 - 00:03 | |
| CVE-2005-4005 | 7.5 |
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php.
|
08-03-2011 - 02:27 | 05-12-2005 - 01:03 | |
| CVE-2005-4004 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.
|
08-03-2011 - 02:27 | 05-12-2005 - 00:03 | |
| CVE-2005-4003 | 7.5 |
Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) srch_product_name paramet
|
20-09-2008 - 04:41 | 05-12-2005 - 00:03 | |
| CVE-2005-4126 | 7.5 |
** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NO
|
05-09-2008 - 20:56 | 09-12-2005 - 11:03 | |
| CVE-2000-0743 | 10.0 |
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 |