Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2016-7256 | 9.3 |
atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows rem
|
02-07-2024 - 12:58 | 10-11-2016 - 07:00 | |
CVE-2012-2751 | 4.3 |
ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote a
|
13-02-2023 - 00:25 | 22-07-2012 - 16:55 | |
CVE-2007-2932 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action.
|
30-06-2021 - 05:15 | 31-05-2007 - 00:30 | |
CVE-2009-5031 | 4.3 |
ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request
|
12-02-2021 - 17:24 | 22-07-2012 - 16:55 | |
CVE-2010-2427 | 4.4 |
VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors. Per: http://www.wmware.com/security/advisories/VMSA-2010-0011.html
'The default configuration of Studio 2.0 is not a
|
10-10-2018 - 19:59 | 22-07-2010 - 05:43 | |
CVE-2010-2667 | 6.0 |
Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual
|
10-10-2018 - 19:59 | 22-07-2010 - 05:43 | |
CVE-2002-0310 | 7.5 |
Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2)
|
11-07-2017 - 01:29 | 31-05-2002 - 04:00 |