| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0435 | 7.5 |
Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10
|
19-10-2018 - 15:44 | 26-01-2006 - 11:07 | |
| CVE-2005-3787 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via (1) the cookie-based login panel, (2) the title parameter and (3) the table creation dialog.
|
19-10-2018 - 15:39 | 24-11-2005 - 01:03 | |
| CVE-2017-16510 | 7.5 |
WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as demonstrated by a "double prepare" approach, a different vulnerability
|
04-02-2018 - 02:29 | 02-11-2017 - 16:29 | |
| CVE-2006-6720 | 7.5 |
PHP remote file inclusion vulnerability in admin/index_sitios.php in Azucar CMS 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the _VIEW parameter.
|
19-10-2017 - 01:29 | 23-12-2006 - 11:28 | |
| CVE-2006-0485 | 4.6 |
The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allo
|
11-10-2017 - 01:30 | 01-02-2006 - 02:02 | |
| CVE-2013-2136 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4)
|
29-08-2017 - 01:33 | 19-08-2013 - 23:55 | |
| CVE-2012-1125 | 6.8 |
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a di
|
29-08-2017 - 01:31 | 08-10-2012 - 17:55 | |
| CVE-2008-3814 | 5.8 |
Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modi
|
08-08-2017 - 01:32 | 08-10-2008 - 22:00 | |
| CVE-2005-4305 | 4.3 |
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page.
|
20-07-2017 - 01:29 | 17-12-2005 - 00:03 | |
| CVE-2006-0336 | 5.0 |
Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors involving "browsing the web".
|
20-07-2017 - 01:29 | 21-01-2006 - 00:03 | |
| CVE-2006-0470 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web script or HTML via the (1) sortby and (2) sortordr parameters, which are not properly handled in a redirection.
|
20-07-2017 - 01:29 | 31-01-2006 - 11:03 | |
| CVE-2006-0043 | 4.6 |
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks.
|
20-07-2017 - 01:29 | 31-01-2006 - 02:03 | |
| CVE-2000-0856 | 7.5 |
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
|
05-09-2008 - 20:22 | 14-11-2000 - 05:00 |