| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9116 | 4.3 |
NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
|
09-09-2020 - 19:57 | 30-10-2016 - 22:59 | |
| CVE-2010-5049 | 7.5 |
SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter.
|
10-10-2018 - 20:08 | 23-11-2011 - 01:55 | |
| CVE-2018-1290 | 7.5 |
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsAp
|
22-05-2018 - 14:25 | 20-04-2018 - 18:29 | |
| CVE-2009-0619 | 7.8 |
Unspecified vulnerability in the Session Border Controller (SBC) before 3.0(2) for Cisco 7600 series routers allows remote attackers to cause a denial of service (SBC card reload) via crafted packets to TCP port 2000.
|
17-08-2017 - 01:29 | 05-03-2009 - 02:30 | |
| CVE-2007-2742 | 7.5 |
Unrestricted file upload vulnerability in labs.beffa.org w2box 4.0.0 Beta4 allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as .php.jpg.
|
29-07-2017 - 01:31 | 17-05-2007 - 19:30 | |
| CVE-2005-2030 | 5.0 |
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat.
|
18-10-2016 - 03:24 | 16-06-2005 - 04:00 | |
| CVE-2002-0299 | 7.6 |
CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.
|
18-10-2016 - 02:18 | 31-05-2002 - 04:00 |