| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-5780 | 4.3 |
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect conf
|
13-05-2022 - 14:57 | 16-10-2013 - 15:55 | |
| CVE-2001-1288 | 2.1 |
Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handli
|
30-04-2019 - 14:27 | 27-07-2001 - 04:00 | |
| CVE-2008-4166 | 4.3 |
Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service (application crash) by attempting to URL encode a string containing many instances of an invalid character.
|
11-10-2018 - 20:51 | 22-09-2008 - 18:34 | |
| CVE-2012-0561 | 3.5 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect integrity, related to PIA Core Technology.
|
07-12-2017 - 02:29 | 03-05-2012 - 18:55 | |
| CVE-2009-0107 | 4.3 |
Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary web script or HTML via the user_id parameter.
|
19-10-2017 - 01:30 | 09-01-2009 - 18:30 | |
| CVE-2009-0106 | 7.5 |
SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
|
19-10-2017 - 01:30 | 09-01-2009 - 18:30 | |
| CVE-2007-1696 | 7.5 |
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.
|
11-10-2017 - 01:31 | 27-03-2007 - 01:19 | |
| CVE-2008-7010 | 10.0 |
Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a direct request to admin/register.php.
|
29-09-2017 - 01:33 | 19-08-2009 - 10:30 | |
| CVE-2008-4355 | 7.5 |
SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. The vulnerability is reported in version 1.30. Other versi
|
29-09-2017 - 01:32 | 30-09-2008 - 18:15 | |
| CVE-2008-4345 | 7.5 |
SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter.
|
29-09-2017 - 01:32 | 30-09-2008 - 18:15 | |
| CVE-2008-4185 | 7.5 |
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213.
|
29-09-2017 - 01:32 | 23-09-2008 - 15:25 | |
| CVE-2008-4350 | 7.5 |
SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
|
29-09-2017 - 01:32 | 30-09-2008 - 18:15 | |
| CVE-2008-4354 | 7.5 |
SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.
|
29-09-2017 - 01:32 | 30-09-2008 - 18:15 | |
| CVE-2008-4174 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) currentpath, (2) invert, (3) search, and (4) sort parameters.
|
08-08-2017 - 01:32 | 23-09-2008 - 15:25 | |
| CVE-2008-4349 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) page parameter in a details action.
|
08-08-2017 - 01:32 | 30-09-2008 - 18:15 | |
| CVE-2008-4184 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained sol
|
08-08-2017 - 01:32 | 23-09-2008 - 15:25 | |
| CVE-2016-7090 | 4.3 |
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting
|
28-11-2016 - 20:37 | 29-09-2016 - 10:59 |