| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3726 | 7.8 |
The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect
|
13-02-2023 - 02:20 | 09-11-2009 - 19:30 | |
| CVE-2019-0593 | 7.6 |
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0
|
24-08-2020 - 17:37 | 05-03-2019 - 23:29 | |
| CVE-2014-5443 | 4.6 |
Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts.
|
20-04-2018 - 14:55 | 19-03-2018 - 21:29 | |
| CVE-2007-6474 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index_3x.php, and unspecified other vectors.
|
29-09-2017 - 01:29 | 20-12-2007 - 20:46 | |
| CVE-2007-6475 | 6.4 |
Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_sel parameter to (1) updater.php and (2) thumber.php.
|
29-09-2017 - 01:29 | 20-12-2007 - 20:46 | |
| CVE-2014-5448 | 2.1 |
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.
|
08-09-2017 - 01:29 | 20-10-2014 - 15:55 | |
| CVE-2014-5449 | 2.1 |
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.
|
08-09-2017 - 01:29 | 20-10-2014 - 15:55 | |
| CVE-2006-0810 | 3.5 |
Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection.
|
20-07-2017 - 01:30 | 21-02-2006 - 02:02 | |
| CVE-2006-0809 | 7.5 |
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php
|
20-07-2017 - 01:30 | 21-02-2006 - 02:02 | |
| CVE-2006-0811 | 4.3 |
Cross-site scripting (XSS) vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form.
|
20-07-2017 - 01:30 | 21-02-2006 - 02:02 | |
| CVE-2017-6895 | 7.5 |
USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml.
|
28-03-2017 - 14:47 | 23-03-2017 - 20:59 | |
| CVE-2003-0021 | 5.0 |
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
|
18-10-2016 - 02:28 | 03-03-2003 - 05:00 | |
| CVE-2014-5447 | 2.1 |
Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the PHP session files. NOTE: this vulnerability exists because of an incomplete fix for CVE-2
|
17-11-2015 - 16:28 | 20-10-2014 - 15:55 | |
| CVE-2011-1566 | 10.0 |
Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0
|
12-05-2012 - 03:37 | 05-04-2011 - 15:19 | |
| CVE-2011-1565 | 10.0 |
Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 | |
| CVE-2011-1568 | 10.0 |
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 | |
| CVE-2011-1567 | 10.0 |
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via craf
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 |