Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2016-3260 | 9.3 |
The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corrupt
|
12-10-2018 - 22:12 | 13-07-2016 - 01:59 | |
CVE-2012-0918 | 10.0 |
Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 through 01-02-/F, 01-03 through 01-03-/F, 02-00 through 02-00-/D, 02-01 through 02-01-/C, and possibly other ver
|
29-08-2017 - 01:31 | 24-01-2012 - 18:55 | |
CVE-2008-4393 | 4.3 |
Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to zodiac/servlet/zodiac. Login required for vendor
|
08-08-2017 - 01:32 | 07-10-2008 - 20:00 | |
CVE-2005-4203 | 7.8 |
LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command. NOTE: due to lack of appropriate details by the origin
|
20-07-2017 - 01:29 | 13-12-2005 - 11:03 | |
CVE-2005-4201 | 5.0 |
Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" (triple dot) sequences in unspecified vectors.
|
20-07-2017 - 01:29 | 13-12-2005 - 11:03 | |
CVE-2005-4177 | 4.3 |
Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter.
|
20-07-2017 - 01:29 | 12-12-2005 - 01:03 | |
CVE-2005-4198 | 7.5 |
SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.
|
20-07-2017 - 01:29 | 13-12-2005 - 11:03 | |
CVE-2005-4202 | 5.0 |
Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2) "..." (triple dot), and (3) "..//" sequences in the URL, (4) "../" sequences in the source parameter to views
|
20-07-2017 - 01:29 | 13-12-2005 - 11:03 | |
CVE-2005-4190 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by (1) the identity field, (2) Category and
|
13-09-2011 - 04:00 | 13-12-2005 - 11:03 | |
CVE-2005-4192 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde Mnemo Note Manager H3 before 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) the notepad's name or (2) description,
|
08-03-2011 - 02:27 | 13-12-2005 - 11:03 | |
CVE-2005-4194 | 5.0 |
Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cause a denial of service (application crash) via a long query string.
|
08-03-2011 - 02:27 | 13-12-2005 - 11:03 | |
CVE-2005-4189 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2) event title field when deletin
|
08-03-2011 - 02:27 | 13-12-2005 - 11:03 | |
CVE-2005-4191 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) descrip
|
08-03-2011 - 02:27 | 13-12-2005 - 11:03 | |
CVE-2010-2855 | 6.8 |
Multiple SQL injection vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) YourEmail and (2) VerificationNumber parameters. NOTE: the p
|
29-07-2010 - 04:00 | 25-07-2010 - 02:04 | |
CVE-2000-0730 | 4.6 |
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 |