| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-4931 | 10.0 |
Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder_level parameter. NOTE: this issue has been disputed by a reliable third party
|
11-04-2024 - 00:47 | 09-10-2011 - 10:55 | |
| CVE-2001-0002 | 7.5 |
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.
|
23-07-2021 - 12:18 | 21-07-2001 - 04:00 | |
| CVE-2015-0061 | 4.3 |
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize memory for TIFF images, which all
|
14-05-2019 - 19:10 | 11-02-2015 - 03:01 | |
| CVE-2007-3323 | 7.5 |
SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter. NOTE: this might be the same as CVE-2005-2190.2.
|
16-10-2018 - 16:48 | 21-06-2007 - 18:30 | |
| CVE-2007-3257 | 6.8 |
Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.
|
16-10-2018 - 16:48 | 19-06-2007 - 16:30 | |
| CVE-2007-3327 | 5.0 |
httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20 (encoded space).
|
16-10-2018 - 16:48 | 21-06-2007 - 18:30 | |
| CVE-2007-3324 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1) comersus_customerAuthenticateForm.asp or (2) comersus_message.asp, different
|
16-10-2018 - 16:48 | 21-06-2007 - 18:30 | |
| CVE-2007-3339 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the (1) FTVAR_LINKP and (2) FTVAR_URLP
|
16-10-2018 - 16:48 | 21-06-2007 - 21:30 | |
| CVE-2016-3194 | 4.3 |
Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or
|
16-08-2017 - 01:29 | 19-08-2016 - 21:59 | |
| CVE-2007-3347 | 7.8 |
The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID
|
29-07-2017 - 01:32 | 22-06-2007 - 18:30 | |
| CVE-2007-3343 | 4.3 |
Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
29-07-2017 - 01:32 | 22-06-2007 - 18:30 | |
| CVE-2007-3329 | 6.8 |
Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted (a) Avi, (b) H.263, or (
|
29-07-2017 - 01:32 | 21-06-2007 - 18:30 | |
| CVE-2007-0670 | 4.6 |
Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, (2) rsh, (3) rcp, (4) rsync, and (5) rlogin.
|
29-07-2017 - 01:30 | 03-02-2007 - 00:28 |