| Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-1384 | 3.5 |
IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t
|
09-10-2019 - 23:38 | 30-03-2018 - 16:29 | |
| CVE-2001-0797 | 10.0 |
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
|
30-10-2018 - 16:26 | 12-12-2001 - 05:00 | |
| CVE-2009-4587 | 5.0 |
Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word.
|
10-10-2018 - 19:49 | 07-01-2010 - 18:30 | |
| CVE-2009-3830 | 5.0 |
The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
|
10-10-2018 - 19:47 | 30-10-2009 - 20:30 | |
| CVE-2010-4646 | 4.3 |
Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter.
|
17-08-2017 - 01:33 | 18-01-2011 - 18:03 | |
| CVE-2009-3626 | 5.0 |
Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match.
|
17-08-2017 - 01:31 | 29-10-2009 - 14:30 | |
| CVE-2016-5569 | 5.5 |
Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiality and integrity via unknown v
|
29-07-2017 - 01:34 | 25-10-2016 - 14:30 | |
| CVE-2009-0737 | 2.6 |
Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitr
|
14-10-2009 - 05:22 | 25-02-2009 - 20:30 | |
| CVE-2005-0392 | 7.2 |
ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.
|
15-11-2008 - 05:43 | 19-05-2005 - 04:00 |