| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-14007 | 10.0 |
Citrix XenServer 7.1 and newer allows Directory Traversal.
|
23-10-2018 - 18:14 | 15-08-2018 - 18:29 | |
| CVE-2002-0615 | 7.5 |
The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka "Media Playback Script Invocation
|
12-10-2018 - 21:31 | 03-07-2002 - 04:00 | |
| CVE-2007-4059 | 5.8 |
Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method.
|
29-09-2017 - 01:29 | 30-07-2007 - 17:30 | |
| CVE-2011-5222 | 7.5 |
SQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the rub parameter.
|
29-08-2017 - 01:30 | 25-10-2012 - 17:55 | |
| CVE-2011-5229 | 7.5 |
SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.
|
29-08-2017 - 01:30 | 25-10-2012 - 17:55 | |
| CVE-2011-5221 | 4.3 |
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.
|
29-08-2017 - 01:30 | 25-10-2012 - 17:55 | |
| CVE-2011-5228 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter.
|
29-08-2017 - 01:30 | 25-10-2012 - 17:55 | |
| CVE-2016-6030 | 3.5 |
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio
|
07-02-2017 - 16:20 | 01-02-2017 - 20:59 |