| Max CVSS | 8.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-6226 | 8.5 |
Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors.
|
14-02-2024 - 01:17 | 14-11-2013 - 20:55 | |
| CVE-2013-4475 | 4.0 |
Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file an
|
01-09-2022 - 16:34 | 13-11-2013 - 15:55 | |
| CVE-2018-15334 | 4.3 |
A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication.
|
04-01-2019 - 13:06 | 28-12-2018 - 15:29 | |
| CVE-2013-5442 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script o
|
29-08-2017 - 01:33 | 13-11-2013 - 15:55 | |
| CVE-2012-1810 | 5.0 |
EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service (daemon restart) by sending data to TCP port (1) 5050 or (2) 24004.
|
29-08-2017 - 01:31 | 13-11-2012 - 13:39 | |
| CVE-2012-1811 | 7.8 |
EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006.
|
29-08-2017 - 01:31 | 13-11-2012 - 13:39 | |
| CVE-2012-1813 | 7.8 |
eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000.
|
29-08-2017 - 01:31 | 13-11-2012 - 13:39 | |
| CVE-2012-1812 | 5.0 |
eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000.
|
29-08-2017 - 01:31 | 13-11-2012 - 13:39 | |
| CVE-2009-2814 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding.
|
17-08-2017 - 01:30 | 14-09-2009 - 16:30 | |
| CVE-2007-5581 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.
|
29-07-2017 - 01:33 | 08-11-2007 - 02:46 | |
| CVE-2002-2241 | 5.0 |
Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.
|
29-07-2017 - 01:29 | 31-12-2002 - 05:00 | |
| CVE-2006-0410 | 5.0 |
SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.
|
20-07-2017 - 01:29 | 25-01-2006 - 02:03 | |
| CVE-2015-5475 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.
|
22-12-2016 - 03:00 | 14-08-2015 - 18:59 |