| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-2074 | 3.5 |
Cross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names.
|
14-02-2024 - 01:17 | 16-06-2009 - 19:30 | |
| CVE-2009-2076 | 3.5 |
Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view n
|
14-02-2024 - 01:17 | 16-06-2009 - 19:30 | |
| CVE-2018-1348 | 5.8 |
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack.
|
09-10-2019 - 23:38 | 26-03-2018 - 19:29 | |
| CVE-2001-1376 | 7.5 |
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.
|
30-10-2018 - 16:25 | 04-03-2002 - 05:00 | |
| CVE-2009-0198 | 9.3 |
Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corrupt
|
11-10-2018 - 21:00 | 11-06-2009 - 15:30 | |
| CVE-2009-1391 | 6.8 |
Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a c
|
03-10-2018 - 22:00 | 16-06-2009 - 23:30 | |
| CVE-2009-1687 | 9.3 |
The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code o
|
29-09-2017 - 01:34 | 10-06-2009 - 14:30 | |
| CVE-2016-8761 | 9.3 |
Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user priv
|
07-04-2017 - 20:00 | 02-04-2017 - 20:59 | |
| CVE-2016-8759 | 9.3 |
Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user priv
|
07-04-2017 - 19:59 | 02-04-2017 - 20:59 | |
| CVE-2016-8760 | 9.3 |
Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user
|
07-04-2017 - 19:59 | 02-04-2017 - 20:59 | |
| CVE-2012-6625 | 7.5 |
SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action.
|
08-12-2016 - 03:02 | 16-01-2014 - 21:55 | |
| CVE-2012-6622 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) groupid parameter in an editgro
|
08-12-2016 - 03:02 | 16-01-2014 - 21:55 | |
| CVE-2009-2031 | 2.1 |
smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes.
|
19-06-2009 - 05:32 | 11-06-2009 - 21:30 | |
| CVE-2009-2075 | 7.5 |
Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors.
|
19-06-2009 - 04:00 | 16-06-2009 - 19:30 | |
| CVE-2009-2077 | 4.0 |
Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private conte
|
19-06-2009 - 04:00 | 16-06-2009 - 19:30 | |
| CVE-2009-1705 | 9.3 |
CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application cr
|
13-06-2009 - 05:33 | 10-06-2009 - 18:00 |