| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2002-0640 | 10.0 |
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authenticat
|
01-07-2024 - 11:15 | 03-07-2002 - 04:00 | |
| CVE-2002-0639 | 10.0 |
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
|
08-02-2024 - 18:37 | 03-07-2002 - 04:00 | |
| CVE-2016-4975 | 4.3 |
Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or valu
|
06-06-2021 - 11:15 | 14-08-2018 - 12:29 | |
| CVE-2011-0291 | 7.2 |
The BlackBerry PlayBook service on the Research In Motion (RIM) BlackBerry PlayBook tablet with software before 1.0.8.6067 allows local users to gain privileges via a crafted configuration file in a backup archive.
|
17-08-2017 - 01:33 | 08-12-2011 - 20:55 | |
| CVE-2007-4100 | 5.0 |
MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.
|
29-07-2017 - 01:32 | 31-07-2007 - 10:17 | |
| CVE-2016-6046 | 3.5 |
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosur
|
09-02-2017 - 19:00 | 01-02-2017 - 20:59 | |
| CVE-2015-4414 | 5.0 |
Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player) plugin 1.1.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
|
07-12-2016 - 18:12 | 17-06-2015 - 18:59 | |
| CVE-2010-4504 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to (1) suggest-category.php and (2) suggest-listing.php.
|
09-12-2010 - 05:00 | 08-12-2010 - 20:00 |