| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-7858 | 10.0 |
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
|
26-04-2023 - 18:55 | 25-08-2017 - 18:29 | |
| CVE-2018-0398 | 7.5 |
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack. Cisco Bug IDs: CSCvg71018.
|
09-10-2019 - 23:31 | 18-07-2018 - 23:29 | |
| CVE-2018-0399 | 5.0 |
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Cisco Bug IDs: CSCvg71044.
|
09-10-2019 - 23:31 | 18-07-2018 - 23:29 | |
| CVE-2007-3814 | 7.5 |
Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the idurlo field in the delete_urlo function in (a) index.php in the urlobox module; the iden field in the (2) update_file and (
|
15-10-2018 - 21:31 | 17-07-2007 - 00:30 | |
| CVE-2002-0798 | 2.1 |
Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service.
|
11-10-2017 - 01:29 | 12-08-2002 - 04:00 | |
| CVE-2009-1658 | 7.5 |
Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user (username) and (2) password parameters. NOTE: some of these detail
|
29-09-2017 - 01:34 | 18-05-2009 - 12:00 | |
| CVE-2011-2711 | 3.5 |
Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint.
|
29-08-2017 - 01:29 | 03-08-2011 - 00:55 | |
| CVE-2014-0371 | 3.5 |
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote authenticated users to affect integrity via unknown vect
|
07-02-2014 - 04:51 | 15-01-2014 - 16:08 |