| Max CVSS | 9.3 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-6555 | 4.3 |
Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title.
|
09-11-2021 - 19:58 | 23-05-2013 - 15:55 | |
| CVE-2016-9562 | 5.0 |
SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer exception and icman outage) via an HTTPS request to the sap.com~P4TunnelingApp!web/myServlet URI, aka SAP Security Note 2313835.
|
20-04-2021 - 19:42 | 23-11-2016 - 02:59 | |
| CVE-2012-6557 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) AboutMe/RealName, (2) AboutMe/Name, (3) AboutMe/Quote, (4) AboutMe/Loc, (5) A
|
04-06-2020 - 12:57 | 23-05-2013 - 15:55 | |
| CVE-2012-6556 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (2) User/LastName parameter to the edit user page.
|
04-06-2020 - 12:57 | 23-05-2013 - 15:55 | |
| CVE-2014-0269 | 9.3 |
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
|
12-10-2018 - 22:05 | 12-02-2014 - 04:50 | |
| CVE-2009-2133 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) sort parameter to pivot/index.php, (3) the value of a check array parameter in a dele
|
10-10-2018 - 19:39 | 19-06-2009 - 18:00 | |
| CVE-2012-2940 | 4.3 |
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG, (2) WMF, (3) PSD, (4) TGA, (5) TTF, (6) BMP, (7) TIFF, or (8) PCX file.
|
29-08-2017 - 01:31 | 27-05-2012 - 20:55 | |
| CVE-2012-2567 | 2.6 |
The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
|
29-08-2017 - 01:31 | 22-05-2012 - 15:55 | |
| CVE-2012-2562 | 7.6 |
The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via a
|
29-08-2017 - 01:31 | 22-05-2012 - 15:55 | |
| CVE-2005-3354 | 5.1 |
Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines.
|
11-07-2017 - 01:33 | 20-11-2005 - 21:03 | |
| CVE-2007-3532 | 7.2 |
NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions, creates /dev/nvidia* device files with insecure permissions, which allows local users to modify video card settings, c
|
28-12-2009 - 05:00 | 27-07-2007 - 22:30 | |
| CVE-2002-0656 | 7.5 |
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
|
10-09-2008 - 19:12 | 12-08-2002 - 04:00 |