| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-14718 | 7.5 |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
|
13-09-2023 - 14:22 | 02-01-2019 - 18:29 | |
| CVE-2017-6814 | 3.5 |
In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstrated by both (1) mishandling of the playlist shortcode in the wp_playlist_shortcode function in wp-includes/media.php and (2) mishan
|
19-03-2019 - 13:24 | 12-03-2017 - 01:59 | |
| CVE-2017-6817 | 3.5 |
In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.
|
19-03-2019 - 12:26 | 12-03-2017 - 01:59 | |
| CVE-2017-6818 | 4.3 |
In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.
|
19-03-2019 - 12:20 | 12-03-2017 - 01:59 | |
| CVE-2006-0687 | 5.0 |
process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to include arbitrary local files or possibly remote files via a modified includeModule and siteModInfo variable.
|
19-10-2018 - 15:45 | 15-02-2006 - 00:02 | |
| CVE-2009-3592 | 4.3 |
Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823.
|
17-08-2017 - 01:31 | 08-10-2009 - 17:30 | |
| CVE-2003-1347 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage fie
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2013-6473 | 6.8 |
Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file.
|
31-12-2016 - 02:59 | 14-03-2014 - 15:55 | |
| CVE-2007-6030 | 10.0 |
Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors o
|
05-09-2008 - 21:32 | 20-11-2007 - 02:46 |