| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-1145 | 5.0 |
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var part
|
03-02-2022 - 20:00 | 16-06-2012 - 00:55 | |
| CVE-2018-0435 | 6.5 |
A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API inte
|
09-10-2019 - 23:32 | 05-10-2018 - 14:29 | |
| CVE-2005-3473 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry, (2) blog_subject, and (3) blog_text parameters (involving the temp_subject varia
|
19-10-2018 - 15:36 | 03-11-2005 - 02:02 | |
| CVE-2011-3048 | 6.8 |
The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk i
|
29-12-2017 - 02:29 | 29-05-2012 - 20:55 | |
| CVE-2014-10023 | 7.5 |
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) edit_block.php, (2) edit_cat.php, (3) edit_note.php, or (4) rmv_topic.php in admincp/.
|
08-09-2017 - 01:29 | 13-01-2015 - 11:59 | |
| CVE-2016-9008 | 5.0 |
IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.
|
13-02-2017 - 22:43 | 01-02-2017 - 22:59 | |
| CVE-2015-5507 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors.
|
28-11-2016 - 19:33 | 18-08-2015 - 18:00 | |
| CVE-2002-1054 | 6.4 |
Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command.
|
17-09-2016 - 01:59 | 04-10-2002 - 04:00 | |
| CVE-2012-4500 | 3.5 |
The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unspecified impact.
|
02-03-2013 - 04:45 | 31-10-2012 - 16:55 |