Max CVSS | 6.8 | Min CVSS | 2.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2009-2783 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) op parameter to modules/pm/viewpmsg.php and (2) query string to modules/profile/user.php.
|
14-02-2024 - 01:17 | 17-08-2009 - 16:30 | |
CVE-2016-0363 | 6.8 |
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke
|
12-09-2023 - 14:55 | 03-06-2016 - 14:59 | |
CVE-2015-2625 | 2.6 |
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.
|
13-05-2022 - 14:38 | 16-07-2015 - 10:59 | |
CVE-2016-3413 | 5.0 |
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103996.
|
04-06-2020 - 12:10 | 18-01-2017 - 22:59 | |
CVE-2018-8602 | 3.5 |
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
|
08-03-2019 - 15:07 | 14-11-2018 - 01:29 | |
CVE-2007-5261 | 6.4 |
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
|
29-09-2017 - 01:29 | 06-10-2007 - 17:17 | |
CVE-2010-4460 | 3.6 |
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon.
|
17-08-2017 - 01:33 | 19-01-2011 - 17:00 | |
CVE-2014-2237 | 5.0 |
The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-i
|
23-04-2015 - 01:59 | 01-04-2014 - 06:35 | |
CVE-2005-4284 | 4.3 |
Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was o
|
08-03-2011 - 02:27 | 16-12-2005 - 11:03 | |
CVE-2002-1791 | 2.1 |
SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files.
|
05-09-2008 - 20:31 | 31-12-2002 - 05:00 |