| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9878 | 5.0 |
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
|
11-04-2022 - 17:18 | 29-12-2016 - 09:59 | |
| CVE-2011-4319 | 4.3 |
Cross-site scripting (XSS) vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HT
|
08-08-2019 - 15:42 | 28-11-2011 - 11:55 | |
| CVE-2007-4095 | 7.5 |
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp.
|
15-10-2018 - 21:33 | 30-07-2007 - 20:17 | |
| CVE-2014-0660 | 7.1 |
Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a crafted Q.931 STATUS message, aka Bug ID CSCui50360.
|
29-08-2017 - 01:34 | 22-01-2014 - 21:55 | |
| CVE-2011-4405 | 7.5 |
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arb
|
29-08-2017 - 01:30 | 29-11-2011 - 17:55 | |
| CVE-2005-4714 | 7.5 |
Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2012-3488 | 4.9 |
The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensiti
|
08-12-2016 - 03:02 | 03-10-2012 - 21:55 | |
| CVE-2015-2954 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to hijack the authentication of arbitrary users.
|
03-12-2016 - 03:07 | 13-06-2015 - 14:59 | |
| CVE-2002-0359 | 10.0 |
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges.
|
18-10-2016 - 02:19 | 03-07-2002 - 04:00 |