| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3519 | 4.9 |
Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (
|
15-11-2021 - 19:50 | 01-10-2009 - 15:30 | |
| CVE-2014-2037 | 5.0 |
Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads. NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466.
|
29-07-2019 - 13:26 | 26-11-2014 - 15:59 | |
| CVE-2002-1394 | 7.5 |
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
|
25-03-2019 - 11:29 | 17-01-2003 - 05:00 | |
| CVE-2006-0654 | 7.5 |
check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies.
|
19-10-2018 - 15:45 | 13-02-2006 - 11:06 | |
| CVE-2006-0653 | 7.5 |
Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via multiple vectors including the username parameter.
|
19-10-2018 - 15:45 | 13-02-2006 - 11:06 | |
| CVE-2006-0655 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
19-10-2018 - 15:45 | 13-02-2006 - 11:06 | |
| CVE-2012-5526 | 5.0 |
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2017-5999 | 5.0 |
An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not
|
15-03-2017 - 18:42 | 06-03-2017 - 06:59 |