| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-1171 | 4.3 |
The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the fi
|
01-12-2020 - 14:43 | 30-03-2009 - 22:30 | |
| CVE-2016-7189 | 9.3 |
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."
|
12-10-2018 - 22:14 | 14-10-2016 - 02:59 | |
| CVE-2018-7445 | 10.0 |
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs b
|
24-04-2018 - 14:53 | 19-03-2018 - 21:29 | |
| CVE-2009-1038 | 6.5 |
Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) us
|
29-09-2017 - 01:34 | 20-03-2009 - 18:30 | |
| CVE-2009-1228 | 4.3 |
Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field (user_name parameter).
|
29-09-2017 - 01:34 | 02-04-2009 - 15:30 | |
| CVE-2009-1170 | 6.9 |
Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process.
|
17-08-2017 - 01:30 | 30-03-2009 - 16:30 | |
| CVE-2015-2765 | 4.3 |
The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
|
03-12-2016 - 03:06 | 27-03-2015 - 14:59 | |
| CVE-2001-1283 | 7.5 |
The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs such as (1) readmail.cgi or (2
|
10-09-2008 - 19:10 | 12-10-2001 - 04:00 | |
| CVE-2005-1403 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor paramet
|
05-09-2008 - 20:49 | 03-05-2005 - 04:00 |