| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-4457 | 6.4 |
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the chemin parameter.
|
15-10-2018 - 21:35 | 21-08-2007 - 21:17 | |
| CVE-2014-0267 | 9.3 |
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014
|
12-10-2018 - 22:05 | 12-02-2014 - 04:50 | |
| CVE-2016-9962 | 4.4 |
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initia
|
09-10-2018 - 20:01 | 31-01-2017 - 22:59 | |
| CVE-2012-2271 | 10.0 |
Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0 allows remote attackers to execute arbitrary code via a long string in the first argument (aka the reg_name argument).
|
05-12-2017 - 02:29 | 21-05-2012 - 20:55 | |
| CVE-2012-2010 | 6.9 |
The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.
|
05-12-2017 - 02:29 | 18-05-2012 - 20:55 | |
| CVE-2012-6559 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) mac, (3) graphtype, (4) name, or (5) type parameter to stats.php; or (6) comment parameter to d
|
29-08-2017 - 01:32 | 23-05-2013 - 15:55 | |
| CVE-2012-6560 | 7.5 |
SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter.
|
29-08-2017 - 01:32 | 23-05-2013 - 15:55 | |
| CVE-2012-6558 | 9.3 |
Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in the resource section of a Portable Executable (PE) file.
|
29-08-2017 - 01:32 | 23-05-2013 - 15:55 | |
| CVE-2005-3635 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTE
|
11-07-2017 - 01:33 | 16-11-2005 - 21:22 | |
| CVE-2005-3636 | 4.3 |
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.
|
11-07-2017 - 01:33 | 16-11-2005 - 21:22 | |
| CVE-2015-4208 | 7.5 |
Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup
|
28-12-2016 - 16:51 | 24-06-2015 - 10:59 | |
| CVE-2012-4398 | 4.9 |
The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application.
|
26-03-2015 - 01:59 | 18-02-2013 - 04:41 | |
| CVE-2012-1249 | 5.0 |
The iLunascape application 1.0.4.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive stored information via a crafted application.
|
04-01-2013 - 04:36 | 21-05-2012 - 20:55 | |
| CVE-2012-2374 | 5.0 |
CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.
|
05-09-2012 - 03:23 | 23-05-2012 - 20:55 | |
| CVE-2009-2146 | 6.0 |
Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in i
|
25-06-2009 - 04:00 | 22-06-2009 - 14:30 | |
| CVE-2002-0657 | 7.5 |
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.
|
10-09-2008 - 19:12 | 12-08-2002 - 04:00 |