| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-4006 | 7.5 |
SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files (1) insert_file.php, (2) insert_image.php, (3) insert_link.php, (4) insert_qcfile.php, and (5) edit.php.
|
14-02-2024 - 01:17 | 05-12-2005 - 01:03 | |
| CVE-2017-5541 | 5.0 |
Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters.
|
25-08-2020 - 15:59 | 20-01-2017 - 08:59 | |
| CVE-2018-18483 | 6.8 |
The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other
|
31-10-2019 - 01:15 | 18-10-2018 - 21:29 | |
| CVE-2009-1969 | 2.1 |
Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors.
|
17-08-2017 - 01:30 | 14-07-2009 - 23:30 | |
| CVE-2007-4958 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for (1) index.php, (2) i_frames/i_login.php, and (3) i_frames/i_top_tags.php. NOTE: the pro
|
29-07-2017 - 01:33 | 18-09-2007 - 22:17 | |
| CVE-2002-1151 | 7.5 |
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are
|
18-10-2016 - 02:24 | 11-10-2002 - 04:00 |